Patterns build · 2026-09-30
OWASP Core Rule Set coreruleset/coreruleset@v4.29.0 converted into native WAF rules for four web servers. Generated automatically; no manual edits.
Coverage: 749 patterns across 22 categories — SQLi, XSS, RCE, LFI, RFI, plus generic anomaly and protocol-violation rules.
Backends
| Backend | Format | Bots | Archive | Size |
|---|---|---|---|---|
| Nginx | map + if
| 1879 | nginx_waf.zip
| 52K |
| Apache | ModSecurity | 1879 | apache_waf.zip
| 84K |
| Traefik | Middleware TOML | 1879 | traefik_waf.zip
| 20K |
| HAProxy | ACL | 1879 | haproxy_waf.zip
| 60K |
Quick install
curl -LO https://github.com/fabriziosalmi/patterns/releases/latest/download/nginx_waf.zip
unzip nginx_waf.zip -d /etc/nginx/waf_patternsIntegration guides → Nginx · Apache · Traefik · HAProxy
Verify (SHA-256)
bff304d8be3d02814ae85725bc2591927c51bee0cea377fd20792f62e8c1a2a0 nginx_waf.zip
d0e775fe156044241e39aeec021c97f1104b4717e3156b59db43ec4fc9f0ff1e apache_waf.zip
a08b0e7087e10c40920a8677da053d55cb1f4f5a261bcb2986eed38f362e1837 traefik_waf.zip
349b789aaaf61239c65eacb0db23095d18ec91966229c006ed38514ae40b6e90 haproxy_waf.zip
echo "bff304d8be3d02814ae85725bc2591927c51bee0cea377fd20792f62e8c1a2a0 nginx_waf.zip" | sha256sum -c -