Re: Reverse Proxy as a WAF?

I use NGINX and ModSecurity 3. At a basic level you install NGINX and add the modsecurity module then use the proxy_pass directive to forward on the traffic to your real hosts. You configure ModSec to filter the bad traffic from reaching your servers via the OWASP core rule set and custom regex.