Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/casbin/caswaf
HTTP & OAuth Gateway and Web Application Firewall (WAF) based on ModSecurity, online demo: https://door.caswaf.com
https://github.com/casbin/caswaf
firewall gateway http modsecurity modsecurity-core-rule-set oauth proxy waf web-application-firewall
Last synced: about 15 hours ago
JSON representation
HTTP & OAuth Gateway and Web Application Firewall (WAF) based on ModSecurity, online demo: https://door.caswaf.com
- Host: GitHub
- URL: https://github.com/casbin/caswaf
- Owner: casbin
- License: apache-2.0
- Created: 2017-05-13T02:42:27.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2024-09-28T07:13:43.000Z (about 1 month ago)
- Last Synced: 2024-10-29T22:37:45.050Z (12 days ago)
- Topics: firewall, gateway, http, modsecurity, modsecurity-core-rule-set, oauth, proxy, waf, web-application-firewall
- Language: Go
- Homepage: https://caswaf.org
- Size: 998 KB
- Stars: 314
- Watchers: 6
- Forks: 20
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
📦⚡️ CasWAF
An open-source Web Application Firewall (WAF) software developed by Go and React.
## Online demo
- Read-only site: https://door.caswaf.com (any modification operation will fail)
- Writable site: https://demo.caswaf.com (original data will be restored for every 5 minutes)
## Documentation
https://caswaf.org
## Architecture
CasWAF contains 2 parts:
| Name | Description | Language | Source code |
|----------|--------------------------------|------------------------|--------------------------------------------------|
| Frontend | Web frontend UI for CasWAF | Javascript + React | https://github.com/casbin/caswaf/tree/master/web |
| Backend | RESTful API backend for CAsWAF | Golang + Beego + MySQL | https://github.com/casbin/caswaf |
## Installation
CasWAF uses Casdoor to manage members. So you need to create an organization and an application for CasWAF in a Casdoor instance.
### Necessary configuration
#### Get the code
```shell
go get github.com/casdoor/casdoor
go get github.com/casbin/caswaf
```
or
```shell
git clone https://github.com/casdoor/casdoor
git clone https://github.com/casbin/caswaf
```
#### Setup database
CasWAF will store its users, nodes and topics information in a MySQL database named: `caswaf`, will create it if not existed. The DB connection string can be specified at: https://github.com/casbin/caswaf/blob/master/conf/app.conf
```ini
dataSourceName = root:123@tcp(localhost:3306)/
```
CasWAF uses XORM to connect to DB, so all DBs supported by XORM can also be used.
#### Configure Casdoor
After creating an organization and an application for CasWAF in a Casdoor, you need to update `clientID`, `clientSecret`, `casdoorOrganization` and `casdoorApplication` in app.conf.
#### Run CasWAF
- Configure and run CasWAF by yourself. If you want to learn more about caswaf.
- Open browser: http://localhost:16001/
### Optional configuration
#### Setup your WAF to enable some third-party login platform
CasWAF uses Casdoor to manage members. If you want to log in with oauth, you should see [casdoor oauth configuration](https://casdoor.org/docs/provider/oauth/overview).
#### OSS, Mail, and SMS services
CasWAF uses Casdoor to upload files to cloud storage, send Emails and send SMSs. See Casdoor for more details.
## Contribute
For CasWAF, if you have any questions, you can open Issues, or you can also directly start Pull Requests(but we recommend opening issues first to communicate with the community).
## License
[Apache-2.0](https://github.com/caswaf/caswaf/blob/master/LICENSE)