Patterns build · 2026-08-11
OWASP Core Rule Set coreruleset/coreruleset@v4.28.0 converted into native WAF rules for four web servers. Generated automatically; no manual edits.
Coverage: 646 patterns across 20 categories — SQLi, XSS, RCE, LFI, RFI, plus generic anomaly and protocol-violation rules.
Backends
| Backend | Format | Bots | Archive | Size |
|---|---|---|---|---|
| Nginx | map + if
| 1871 | nginx_waf.zip
| 52K |
| Apache | ModSecurity | 1871 | apache_waf.zip
| 64K |
| Traefik | Middleware TOML | 1871 | traefik_waf.zip
| 20K |
| HAProxy | ACL | 1871 | haproxy_waf.zip
| 44K |
Quick install
curl -LO https://github.com/fabriziosalmi/patterns/releases/latest/download/nginx_waf.zip
unzip nginx_waf.zip -d /etc/nginx/waf_patternsIntegration guides → Nginx · Apache · Traefik · HAProxy
Verify (SHA-256)
19e7762e7285be3b19b53f5950847f21a250c0e6b1fc06339737776c632fccf5 nginx_waf.zip
cf8b13b29bba355e8220d66afbf86d40fcd0270dcf675efb15db9145b04b43f9 apache_waf.zip
3cb3135ed42a94d4d6ce09d781253e55d554d33c68a1f31ac5a434f4f91fb511 traefik_waf.zip
009eaef23a939c1cd3ca21fda6e4afed38377cb6d27dd333ee1fa3cf3621106b haproxy_waf.zip
echo "19e7762e7285be3b19b53f5950847f21a250c0e6b1fc06339737776c632fccf5 nginx_waf.zip" | sha256sum -c -