Web application firewall
securitywaf
A layer-7 rule engine that inspects and blocks HTTP requests.
- Category
- Security
- Properties
- 6
- Components
- 14
- Rules
- 0
A node of this kind resolves each property from its own props, then the component's defaults, then the default below.
| property | type | values | required | default |
|---|---|---|---|---|
| botProtection | boolean | — | no | — |
| customRuleCount | integer | — | no | — |
| managed | boolean | — | no | false |
| managedRuleSet | string | — | no | — |
| mode | enum | detection | prevention | off | no | — |
| rateLimiting | boolean | — | no | — |
No rule selects this kind or its category. Governance calls that a recorded gap.
vendor-neutral
alibabacloud
# yaml-language-server: $schema=../schema/kind.schema.json # Operates on request content rather than addresses and ports, so it holds a managed rule set and a detection/prevention mode a rule reads directly. mode has no default because a WAF left in detection is exactly what a rule should catch. schemaVersion: "1" type: "kind" id: "waf" category: "security" properties: mode: type: "enum" values: ["detection", "prevention", "off"] managedRuleSet: type: "string" customRuleCount: type: "integer" botProtection: type: "boolean" rateLimiting: type: "boolean" managed: type: "boolean" default: false