p0pr0ck5/lua-resty-waf

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1324 stars · 305 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

lua-resty-waf is a high-performance web application firewall (WAF) library built on the OpenResty/ngx_lua stack. It inspects HTTP requests using configurable rule definitions and supports custom rulesets, multiple storage backends, and detailed event logging.

Use cases

• protect a web application from common attacks like SQL injection and XSS
• replace ModSecurity with a lightweight nginx-based WAF
• add request filtering rules to an OpenResty server
• log and monitor suspicious HTTP requests
• run a WAF in simulation mode to test rules before blocking

When to choose

• you run OpenResty or nginx with ngx_lua and want an in-process WAF without a separate proxy
• you need high-performance request inspection with customizable Lua rule definitions
• you want flexible event logging to external systems like Redis or sockets

When to avoid

• you need a managed WAF with a GUI dashboard and commercial support
• your stack is not nginx/OpenResty based
• you need OWASP CRS parity with ModSecurity's full feature set

Facets

library · maturity maintenance

security middleware http-server security web-development backend lua waf openresty nginx-lua modsecurity-alternative web-application-firewall rate-limiting rule-engine nginx linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="p0pr0ck5/lua-resty-waf")