Patterns build · 2026-08-31
OWASP Core Rule Set coreruleset/coreruleset@v4.29.0 converted into native WAF rules for four web servers. Generated automatically; no manual edits.
Coverage: 646 patterns across 20 categories — SQLi, XSS, RCE, LFI, RFI, plus generic anomaly and protocol-violation rules.
Backends
| Backend | Format | Bots | Archive | Size |
|---|---|---|---|---|
| Nginx | map + if
| 1872 | nginx_waf.zip
| 52K |
| Apache | ModSecurity | 1872 | apache_waf.zip
| 60K |
| Traefik | Middleware TOML | 1872 | traefik_waf.zip
| 20K |
| HAProxy | ACL | 1872 | haproxy_waf.zip
| 44K |
Quick install
curl -LO https://github.com/fabriziosalmi/patterns/releases/latest/download/nginx_waf.zip
unzip nginx_waf.zip -d /etc/nginx/waf_patternsIntegration guides → Nginx · Apache · Traefik · HAProxy
Verify (SHA-256)
3639ae648a4b8532940787814abe97e187379f23d8c3d5b8ca66542308b2e07a nginx_waf.zip
6a00b5cf35a4e190a42c559cddf9f863b081fd2f3853a3e67db46f8098f3397e apache_waf.zip
a184895af83dffdcfe88347b19b2e9606abfad6482ad612e39bede1001cd5ae9 traefik_waf.zip
4776083389f65fbb65be0ca9e11a45b813e1421145c16e83a29457ad666613fa haproxy_waf.zip
echo "3639ae648a4b8532940787814abe97e187379f23d8c3d5b8ca66542308b2e07a nginx_waf.zip" | sha256sum -c -