Explanation of Enabling WAF on Little Z's Blog
Publish: 2016-10-26 | Modify: 2017-06-21
Using a WAF is not a fancy thing. Little Z's blog has officially deployed a WAF in the environment to enhance website security. The open-source VeryNginx is used for implementation. If needed, you can refer to the documentation: OneinStack deployment of VeryNginx to implement WAF functionality.
What is a WAF?
A Web Application Firewall (WAF) is a product that provides protection for web applications by executing a series of security policies specifically for HTTP/HTTPS. It is also known as a website application-level intrusion defense system.
Website Description
If you accidentally trigger a WAF rule, your request will be intercepted. For example, if you try to request an illegal address like https://blog.xiaoz.org//www.zip%20Match1:www.zip%20Match2:/, it will have the same effect as shown in the image below.
If you have encountered any abnormalities when accessing the blog recently, please provide feedback below. Your assistance is greatly appreciated.
Comments
xiaoz
I come from China and I am a freelancer. I specialize in Linux operations, PHP, Golang, and front-end development. I have developed open-source projects such as Zdir, ImgURL, CCAA, and OneNav.
Random article
- Move Docker Directory to Another Partition
- Practical Guide to Writing Systemd Service in Linux System
- Free AI Drawing Tool Driven by Stable Diffusion Technology: Experience getimg.ai Online
- Nginx Reverse Proxy + Thumbor Image Cropping: Enhancing Nginx's Image Cropping Support
- Multi-functional File Sharing Program Zdir 4.1.1 Update, Summer Promotion Ending Soon
- Adding a new user with sudo privileges in Debian system
- Changing the default SQLite driver for GORM
- Multi-functional File Sharing Program Zdir 4.2.2 Released, Added SMB Mounting (Easter Egg at the End)
- A Brief Account of Exploring iKuai OS, a Software Router System
- How to resolve the issue of unable to use ping command in Windows Azure?