modsecurity-go icon indicating copy to clipboard operation
modsecurity-go copied to clipboard

Published 20 hours ago • verified publisher icon senghoo

Bringing this up to date

Open AlexBaker- opened this issue 5 years ago • 8 comments

Hi @senghoo ,

Thanks for all the awesome work you put into this library! I noticed in a couple of your comments (such as in #2) that you mentioned stopping work due to instabilities in libmodsecurity. Since April 2017, libmodsecurity has had around 7 releases, including v3.0, which are seemingly pretty stable now. Would you be interested in pursuing this library again? What support would you need from myself and others?

Thanks again!

AlexBaker- avatar May 28 '19 18:05 AlexBaker-

thank you for your message. I am considering restarting this project recently. I have finished some work, but I have not commit it. Now I'm mainly testing new v3 library and feasibility. You can keep an eye on this repository.

senghoo avatar May 31 '19 11:05 senghoo

Wonderful news, really glad to hear it! A colleague and I are working on this as well in a fork (https://github.com/AlexBaker-/modsecurity-go), so we'll send some pull requests to you soon when ready.

AlexBaker- avatar Jun 01 '19 16:06 AlexBaker-

I’m going to implement a go port for ModSecurity. Not just using libmodsecurity. I think it will be more in line with go style and easy to use.

senghoo avatar Jun 02 '19 09:06 senghoo

If I understand correctly, you're planning on implementing libmodsecurity directly in Go? Interesting idea, I wish you all the best luck! I'll keep watching this repository for more updates.

In that case, I think in the meantime I will continue work on the libmodsecurity C binding method since it's showing some promise for my use-case. Thanks for all the work you put into that!

AlexBaker- avatar Jun 02 '19 18:06 AlexBaker-

@senghoo, great to read, that you want to do a Go port. We could integrate and build a Go http proxy waf with that. We thought about hacking a bit for fun with your c bindings, but I think a Go port is much more reasonable for us in production.

We thought about integrating waf filters into skipper. Filters work on http.Request and http.Response, see also https://godoc.org/github.com/zalando/skipper/filters. I think it would be a nice interface, if we can do that.

szuecs avatar Jun 02 '19 18:06 szuecs

Hello guys, I have a similar project and it's integrated with skipper: https://github.com/jptosso/coraza-waf

jptosso avatar May 30 '20 15:05 jptosso

@jptosso did you deleted the project? (or is private now)

aledbf avatar Jun 16 '20 16:06 aledbf

@jptosso did you deleted the project? (or is private now)

Hey, my repository is back online if you want to check it out

jptosso avatar Jun 30 '20 15:06 jptosso