starjun/openstar

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1283 stars · 417 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

OpenStar (WAF+) is a Web Application Firewall written in Lua that runs on nginx/OpenResty (LuaJIT), filtering HTTP traffic through JSON-configured rules for host, URI, args, method, IP, referer, and POST form matching. It adds rate limiting keyed on IP or business attributes, external-CSRF blocking, cookie/redirect actions, and Redis-based master/slave config sync for clusters.

Use cases

• protect an nginx site from sql injection, xss, and scanning
• add a self-hosted waf to openresty
• rate limit requests by ip or by cookie identity
• block external csrf referers while whitelisting static assets
• restrict an admin directory or phpmyadmin to an ip whitelist
• sync waf rules across a cluster of nginx edge servers via redis
• build a cdn-style security layer in front of web apps

When to choose

• you already run nginx/OpenResty and want a scriptable Lua WAF with rich rule expressions (regex, aho-corasick parallel matching, start/end/in lists, length checks)
• you need per-business-attribute rate limiting (e.g., by cookie guid) rather than plain IP throttling
• you operate multiple edge/proxy nodes and want config pushed over Redis in master/slave mode
• you are comfortable with Chinese-language docs and editing JSON rule files directly

When to avoid

• you need actively patched security software - the last release was 2021 and there is no license file
• you want a managed dashboard or layer-4 protection - that exists only in the separate closed-source/free-to-use non-open build
• you require license clarity for commercial or enterprise deployment
• you prefer maintained alternatives like ModSecurity, Coraza, or a cloud WAF

Facets

application · maturity maintenance

security rate-limiting proxy security web-development self-hosted waf web-application-firewall openresty nginx luajit cdn csrf-protection ip-whitelist reverse-proxy redis-cluster linux web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="starjun/openstar")