Patterns build · 2026-06-11
OWASP Core Rule Set coreruleset/coreruleset@v4.27.0 converted into native WAF rules for four web servers. Generated automatically; no manual edits.
Coverage: 646 patterns across 20 categories — SQLi, XSS, RCE, LFI, RFI, plus generic anomaly and protocol-violation rules.
Backends
| Backend | Format | Bots | Archive | Size |
|---|---|---|---|---|
| Nginx | map + if
| 1831 | nginx_waf.zip
| 52K |
| Apache | ModSecurity | 1831 | apache_waf.zip
| 60K |
| Traefik | Middleware TOML | 1831 | traefik_waf.zip
| 20K |
| HAProxy | ACL | 1831 | haproxy_waf.zip
| 44K |
Quick install
curl -LO https://github.com/fabriziosalmi/patterns/releases/latest/download/nginx_waf.zip
unzip nginx_waf.zip -d /etc/nginx/waf_patternsIntegration guides → Nginx · Apache · Traefik · HAProxy
Verify (SHA-256)
248073a34d0941c54c6e2c2ac8db8f046f6a2c47228b8ab701633ca713d8e650 nginx_waf.zip
6cf2923c2bdcd5136fe6eabe9ed07790ba25a9411244d6c103a68ef32984b7d8 apache_waf.zip
cb8b252f5eb75f60288191588719fec285ae3ff957af9f2635a8196faadd7012 traefik_waf.zip
71fbb2763b6c17e2e8bc60098284f3f0406af5bc1c008dd760956162d48db863 haproxy_waf.zip
echo "248073a34d0941c54c6e2c2ac8db8f046f6a2c47228b8ab701633ca713d8e650 nginx_waf.zip" | sha256sum -c -