Patterns build · 2026-07-01
OWASP Core Rule Set coreruleset/coreruleset@v4.27.0 converted into native WAF rules for four web servers. Generated automatically; no manual edits.
Coverage: 646 patterns across 20 categories — SQLi, XSS, RCE, LFI, RFI, plus generic anomaly and protocol-violation rules.
Backends
| Backend | Format | Bots | Archive | Size |
|---|---|---|---|---|
| Nginx | map + if
| 1857 | nginx_waf.zip
| 52K |
| Apache | ModSecurity | 1857 | apache_waf.zip
| 56K |
| Traefik | Middleware TOML | 1857 | traefik_waf.zip
| 20K |
| HAProxy | ACL | 1857 | haproxy_waf.zip
| 44K |
Quick install
curl -LO https://github.com/fabriziosalmi/patterns/releases/latest/download/nginx_waf.zip
unzip nginx_waf.zip -d /etc/nginx/waf_patternsIntegration guides → Nginx · Apache · Traefik · HAProxy
Verify (SHA-256)
02485b0666574d299ef2d66bd366156574408be045f2c250c74dee643a7e0852 nginx_waf.zip
79e3a655c7c1f474c83614d8c72e8d99969fe95b54e23c21324b983b78ee91f5 apache_waf.zip
757773da08c1ba2502a61081b6d6793bdb45c5236cd470669a2dbf99606b8ea6 traefik_waf.zip
17076987d5eaeea3f3bc37cd471077d50c39c4e5ea8808a66a695a41563711a4 haproxy_waf.zip
echo "02485b0666574d299ef2d66bd366156574408be045f2c250c74dee643a7e0852 nginx_waf.zip" | sha256sum -c -