https://bareproxy.com/tags/waf/ Recent content in Waf on BareProxy.com Hugo en-us Thu, 08 Oct 2026 00:00:00 +0000 https://bareproxy.com/bareproxy-rate-limiting-and-waf-plugin-per-address-limits-and-bad-request-rules-at-the-edge/ Thu, 08 Oct 2026 00:00:00 +0000 https://bareproxy.com/bareproxy-rate-limiting-and-waf-plugin-per-address-limits-and-bad-request-rules-at-the-edge/ <p><strong>Status: planned, number 8 of 21 in BareProxy&rsquo;s build order.</strong> The plugins are built easiest first, and this one is about a day of coding: counters in shared data and simple rules. It comes after the A/B and canary splits plugin. This post describes what it will do, and it will be updated as it is built.</p> <p>Two of the oldest reasons to put a proxy in front of an app are to stop one client from taking all of it, and to turn away requests that are obviously up to no good before the app has to look at them. Most small apps handle neither. A login form that takes a thousand guesses a minute, or a search endpoint hammered by a script, can take a site down long before anyone notices an attack.</p>