基于Nginx+Modsecurity实现Web应用防护系统

Implementation of Web Application Protection System based on Nginx+Modsecurity

Nginx是性能强大的轻量级Web应用服务器,它使用C语言实现,代码精简高效,为微内核架构,拥有超强的健壮性和可拓展性。使用反向代理方式部署Nginx服务器,可以直接阻止用户对内部业务服务器的网络攻击。Modsecurity是Nginx的一个扩展模块,能对用户Web请求进行安全性评估和有效阻断,形成一个高性能的Web应用防护体系,达到硬件Web应用防火墙(WAF)的效果。

Nginx is a powerful lightweight Web application server. It is implemented in the C language, the code is streamlined and efficient, and it has super robustness and expansibility for the microkernel architecture. Using reverse proxy to deploy Nginx server can directly prevent users from attacking the internal business servers. Modsecurity is an extended module of Nginx, which can evaluate and block the security of user Web requests, and form a high performance Web application protection system to achieve the effect of the hardware Web application firewall （WAF）.