Patterns build · 2026-05-01
OWASP Core Rule Set coreruleset/coreruleset@v4.25.0 converted into native WAF rules for four web servers. Generated automatically; no manual edits.
Coverage: 646 patterns across 20 categories — SQLi, XSS, RCE, LFI, RFI, plus generic anomaly and protocol-violation rules.
Backends
| Backend | Format | Bots | Archive | Size |
|---|---|---|---|---|
| Nginx | map + if
| 1803 | nginx_waf.zip
| 52K |
| Apache | ModSecurity | 1803 | apache_waf.zip
| 60K |
| Traefik | Middleware TOML | 1803 | traefik_waf.zip
| 16K |
| HAProxy | ACL | 1803 | haproxy_waf.zip
| 44K |
Quick install
curl -LO https://github.com/fabriziosalmi/patterns/releases/latest/download/nginx_waf.zip
unzip nginx_waf.zip -d /etc/nginx/waf_patternsIntegration guides → Nginx · Apache · Traefik · HAProxy
Verify (SHA-256)
cecb28db26168f1b2c593e46da6eb8160c7b9dc502a240db340390ee315a2dd8 nginx_waf.zip
df281bbb9bbc5e50db7fba328b3644d62f18f7b765d3fa3121024e445e9b4f7f apache_waf.zip
c688f812127bfe8e67e3c68e09023f1860447bd6454ad087a16d2ec979c15b88 traefik_waf.zip
e0a205bdc88d3d483eed58809c3e922e272c9f0bfd8869ed44b795384e6749b1 haproxy_waf.zip
echo "cecb28db26168f1b2c593e46da6eb8160c7b9dc502a240db340390ee315a2dd8 nginx_waf.zip" | sha256sum -c -