Re: Reverse Proxy as a WAF?

Togger75 Wrote:
-------------------------------------------------------
> I use NGINX and ModSecurity 3. At a basic level you install NGINX and
> add the modsecurity module then use the proxy_pass directive to
> forward on the traffic to your real hosts. You configure ModSec to
> filter the bad traffic from reaching your servers via the OWASP core
> rule set and custom regex.

@Togger75, Thank you for your answer! I have two more questions. If I want to use the WAF for a load balancer, do I need to put the WAF in front of the load balancer? I'm also thinking how many sites can I proxy with WAF without performance issues?

Any help is appreciated.