ngx_lua_waf_oneinstack

ngx_lua_waf是一个基于lua-nginx-module的web应用防火墙

Go to file

lj2007331@gmail.com 855064926c Update init.lua		2018-07-23 12:01:25 +08:00
wafconf	Add test write function	2018-06-27 11:21:37 +08:00
.gitignore	Initial commit	2018-06-24 16:01:03 +08:00
LICENSE	Initial commit	2018-06-24 16:01:03 +08:00
README.md	Update init.lua	2018-07-23 12:01:25 +08:00
access.lua	commit	2018-06-24 20:16:03 +08:00
config.lua	Update init.lua	2018-07-23 12:01:25 +08:00
init.lua	Update init.lua	2018-07-23 12:01:25 +08:00
lib.lua	Add test write function	2018-06-27 11:21:37 +08:00

README.md

ngx_lua_waf

ngx_lua_waf是一个基于lua-nginx-module的web应用防火墙

OneinStack启用ngx_lua_waf

~/oneinstack/addons.sh
#install ngx_lua_waf

手工安装

cd /root/oneinstack/src
wget http://luajit.org/download/LuaJIT-2.1.0-beta3.tar.gz  #推荐2.1版本
wget https://github.com/openresty/lua-cjson/archive/2.1.0.6.tar.gz -o lua-cjson-2.1.0.6.tar.gz
git clone https://github.com/simpl/ngx_devel_kit.git
git clone https://github.com/openresty/lua-nginx-module.git
tar xzf LuaJIT-2.1.0-beta3.tar.gz
tar xzf lua-cjson-2.1.0.6.tar.gz
cd LuaJIT-2.1.0-beta3
make && make install
cd ../lua-cjson-2.1.0.6
sed -i 's@LUA_INCLUDE_DIR.*@LUA_INCLUDE_DIR \?=   \$(PREFIX)/include/luajit-2.1@' Makefile
make && make install
cd ..
export LUAJIT_LIB=/usr/local/lib
export LUAJIT_INC=/usr/local/include/luajit-2.1
sed -i "s@^nginx_modules_options=.*@nginx_modules_options='--with-ld-opt=-Wl,-rpath,/usr/local/lib --add-module=../lua-nginx-module --add-module=../ngx_devel_kit'@" options.conf
./install.sh --nginx_option 1

cat > /usr/local/nginx/conf/waf.conf << EOF
lua_shared_dict limit 20m;
lua_package_path "/usr/local/nginx/conf/waf/?.lua;;";
init_by_lua_file "/usr/local/nginx/conf/waf/init.lua";
access_by_lua_file "/usr/local/nginx/conf/waf/access.lua";
EOF

#vi /usr/local/nginx/conf/nginx.conf
#include vhost/*.conf;下一行新增，如下
include waf.conf;

Copyright

copy以下项目:
https://github.com/loveshell/ngx_lua_waf
https://github.com/unixhot/waf