MBCDN

Dies ist eine alte Version des Dokuments!

---

Coraza (WAF)

sudo apt update
sudo apt install -y git make build-essential pkg-config curl ca-certificates golang-go
go version

sudo useradd --system --no-create-home --shell /usr/sbin/nologin coraza-spoa || true

sudo mkdir -p /etc/coraza-spoa
sudo mkdir -p /var/log/coraza-spoa
sudo chown -R coraza-spoa:coraza-spoa /var/log/coraza-spoa

cd /usr/local/src
sudo git clone https://github.com/corazawaf/coraza-spoa.git
cd coraza-spoa

go run mage.go build

# binary is in build now

sudo install -m 0755 build/coraza-spoa /usr/local/bin/coraza-spoa

# test it
/usr/local/bin/coraza-spoa -h

sudo cp /usr/local/src/coraza-spoa/example/coraza-spoa.yaml /etc/coraza-spoa/coraza-spoa.yaml

sudo vi /etc/coraza-spoa/coraza-spoa.yaml

# testweise starten
sudo -u coraza-spoa /usr/local/bin/coraza-spoa -config /etc/coraza-spoa/coraza-spoa.yaml

[coraza]
spoe-agent coraza-agent
    messages coraza_req
    option var-prefix coraza
    timeout hello 5s
    timeout idle 30s
    timeout processing 30s
    use-backend coraza-spoa-backend

spoe-message coraza_req
    args app=str("sample_app") src_ip=src method=method path=path query=query version=req.ver
    event on-frontend-http-request