Patterns build · 2026-07-19
OWASP Core Rule Set coreruleset/coreruleset@v4.28.0 converted into native WAF rules for four web servers. Generated automatically; no manual edits.
Coverage: 646 patterns across 20 categories — SQLi, XSS, RCE, LFI, RFI, plus generic anomaly and protocol-violation rules.
Backends
| Backend | Format | Bots | Archive | Size |
|---|---|---|---|---|
| Nginx | map + if
| 1870 | nginx_waf.zip
| 52K |
| Apache | ModSecurity | 1870 | apache_waf.zip
| 60K |
| Traefik | Middleware TOML | 1870 | traefik_waf.zip
| 20K |
| HAProxy | ACL | 1870 | haproxy_waf.zip
| 44K |
Quick install
curl -LO https://github.com/fabriziosalmi/patterns/releases/latest/download/nginx_waf.zip
unzip nginx_waf.zip -d /etc/nginx/waf_patternsIntegration guides → Nginx · Apache · Traefik · HAProxy
Verify (SHA-256)
4e87d3174ce8dc06936efdda24a34f0a79c83e2f84253626cd73825f078f5d89 nginx_waf.zip
514c47aad56b4aab0c4018c1a4fb60947248a0199f6a2c2daa5e5cca6117c503 apache_waf.zip
52bbd906f6185146a170fe1a63db8d811c40dea31d98789ff5e1a85f6d5dea87 traefik_waf.zip
fc17be87ab561e64bc5fdc0b1607c5c9e48f9ee7cd4f24d0f372b6a800a2592b haproxy_waf.zip
echo "4e87d3174ce8dc06936efdda24a34f0a79c83e2f84253626cd73825f078f5d89 nginx_waf.zip" | sha256sum -c -