Web Application Firewall

Request-inspecting firewall attached to a load balancer or the global edge.

Provider: oci
Kind: Web application firewall
Category: Security
Official docs: https://docs.oracle.com/en-us/iaas/Content/WAF/Concepts/overview.htm

Properties · 4 set by this component

property	type	values	required	kind default	this component
botProtection	boolean	—	no	—	▸ false
customRuleCount	integer	—	no	—	▸ 0
enforcementPoint · component property	enum	load-balancer \| dns-cname	no	load-balancer	inherited
managed	boolean	—	no	false	▸ true
managedRuleSet	string	—	no	—	inherited
mode	enum	detection \| prevention \| off	no	—	inherited
policyType · component property	enum	waf-policy \| edge-policy	no	waf-policy	inherited
protectionCapabilityCount · component property	integer	—	no	0	inherited
rateLimiting	boolean	—	no	—	▸ false
ruleAction · component property	enum	allow \| check \| return-http-response	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "waf", component: "oci-waf" }

Other Web application firewall products · 13

Web Application Firewallalibaba-wafalibabacloudwaf AWS WAF web ACLaws-wafawswaf AWS WAF Classicaws-waf-classicawswaf Azure Web Application Firewallazure-web-application-firewallazurewaf Firewall for AIcloudflare-firewall-for-aicloudflarewaf Cloudflare WAFcloudflare-wafcloudflarewaf Corazacorazawaf Imperva Application Securityimpervawaf ModSecuritymodsecuritywaf NAXSInaxsiwaf Generic web application firewallwafwaf Google Cloud Armorgoogle-cloud-armorgcpwaf reCAPTCHA Enterprisegoogle-recaptcha-enterprisegcpwaf

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Oracle Cloud Web Application Firewall: regional WAF policy plugged into a load balancer, or a
3# global edge policy fronted by a DNS CNAME ("Web Application Firewall Overview"). The design
4# principle is passiveness: a new policy carries no rules until protection capabilities are chosen.
5schemaVersion: "1"
6type: "component"
7id: "oci-waf"
8kind: "waf"
9provider: "oci"
10docs: "https://docs.oracle.com/en-us/iaas/Content/WAF/Concepts/overview.htm"
11defaults:
12  managed: true
13  customRuleCount: 0
14  botProtection: false
15  rateLimiting: false
16properties:
17  policyType:
18    type: "enum"
19    values: ["waf-policy", "edge-policy"]
20    default: "waf-policy"
21  enforcementPoint:
22    type: "enum"
23    values: ["load-balancer", "dns-cname"]
24    default: "load-balancer"
25  ruleAction:
26    type: "enum"
27    values: ["allow", "check", "return-http-response"]
28  protectionCapabilityCount:
29    type: "integer"
30    default: 0

The same page as markdown, for an agent: /catalogue/components/oci-waf.md