Web app firewall

[mrkurt]

People ask about WAF features pretty frequently, I know of several devs that run nginx + extensions to get a WAF in front of their app.

This would make a great example Fly application. The owasp modsecurity docker image is a good place to start: https://hub.docker.com/r/owasp/modsecurity

Possibly related features are:

• Bot / abuse protection (though that could be its own example)
• DDoS protection (big topic)

[daKeshra]

Is this still on? I am interested in working on this.