NAXSI

nginx web application firewall using a small core rule set plus learned whitelists.

Provider: default
Kind: Web application firewall
Category: Security
Official docs: https://github.com/wargio/naxsi/wiki

Properties · 4 set by this component

property	type	values	required	kind default	this component
botProtection	boolean	—	no	—	▸ false
customRuleCount	integer	—	no	—	inherited
learningMode · component property	boolean	—	no	true	inherited
managed	boolean	—	no	false	▸ false
managedRuleSet	string	—	no	—	▸ naxsi-core-rules
mode	enum	detection \| prevention \| off	no	—	inherited
model · component property	enum	whitelist \| blacklist	no	whitelist	inherited
rateLimiting	boolean	—	no	—	▸ false
whitelistCount · component property	integer	—	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "naxsi", component: "naxsi" }

Other Web application firewall products · 13

Web Application Firewallalibaba-wafalibabacloudwaf AWS WAF web ACLaws-wafawswaf AWS WAF Classicaws-waf-classicawswaf Azure Web Application Firewallazure-web-application-firewallazurewaf Firewall for AIcloudflare-firewall-for-aicloudflarewaf Cloudflare WAFcloudflare-wafcloudflarewaf Corazacorazawaf Imperva Application Securityimpervawaf ModSecuritymodsecuritywaf Generic web application firewallwafwaf Google Cloud Armorgoogle-cloud-armorgcpwaf reCAPTCHA Enterprisegoogle-recaptcha-enterprisegcpwaf Web Application Firewalloci-wafociwaf

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# NAXSI: nginx WAF module. The wiki describes it as a "DROP-by-default firewall" driven by
3# a small core rule file plus whitelists, with an intensive learning phase recommended
4# before enforcement, so a fresh deployment runs in learning rather than blocking.
5schemaVersion: "1"
6type: "component"
7id: "naxsi"
8kind: "waf"
9provider: "default"
10docs: "https://github.com/wargio/naxsi/wiki"
11defaults:
12  managed: false
13  managedRuleSet: "naxsi-core-rules"
14  botProtection: false
15  rateLimiting: false
16properties:
17  learningMode:
18    type: "boolean"
19    default: true
20  model:
21    type: "enum"
22    values: ["whitelist", "blacklist"]
23    default: "whitelist"
24  whitelistCount:
25    type: "integer"

The same page as markdown, for an agent: /catalogue/components/naxsi.md