Patterns build · 2026-05-22
OWASP Core Rule Set coreruleset/coreruleset@v4.26.0 converted into native WAF rules for four web servers. Generated automatically; no manual edits.
Coverage: 646 patterns across 20 categories — SQLi, XSS, RCE, LFI, RFI, plus generic anomaly and protocol-violation rules.
Backends
| Backend | Format | Bots | Archive | Size |
|---|---|---|---|---|
| Nginx | map + if
| 1826 | nginx_waf.zip
| 52K |
| Apache | ModSecurity | 1826 | apache_waf.zip
| 60K |
| Traefik | Middleware TOML | 1826 | traefik_waf.zip
| 20K |
| HAProxy | ACL | 1826 | haproxy_waf.zip
| 44K |
Quick install
curl -LO https://github.com/fabriziosalmi/patterns/releases/latest/download/nginx_waf.zip
unzip nginx_waf.zip -d /etc/nginx/waf_patternsIntegration guides → Nginx · Apache · Traefik · HAProxy
Verify (SHA-256)
8532964d22e637d56f9b59f94a91d99ca172047bb722af12964de10bf0921ab2 nginx_waf.zip
8766f7c58d72a9eeb5f0873dae5c9acef39e45a15178018e1aba95f335c20c2f apache_waf.zip
7b033ef7bcd286e71c2dda93dea9101dbce69296bcf8746c446d9a7a8374241b traefik_waf.zip
4b37f264900318b40e28a56189db777f791f20b12321ce830d9fed63bd243de1 haproxy_waf.zip
echo "8532964d22e637d56f9b59f94a91d99ca172047bb722af12964de10bf0921ab2 nginx_waf.zip" | sha256sum -c -