{"repo":"AarambhDevHub/pingora-waf","free":true,"listed":false,"github":"https://github.com/AarambhDevHub/pingora-waf","clone":"git clone https://github.com/AarambhDevHub/pingora-waf.git","description":"⚡ High-performance Web Application Firewall built with Rust and Cloudflare's Pingora. Blocks SQL injection, XSS, and malicious traffic at 15K+ req/sec with <7ms latency. Production-ready with Prometheus metrics, rate limiting, and IP filtering. 3x faster than ModSecurity.","language":"Rust","stars":44,"topics":["cloudflare","firewall","pingora","prometheus","rust","security","waf","web-security"],"license":"Apache-2.0","category":"analytics","readme_excerpt":"Pingora WAF - Production-Ready Web Application Firewall A high-performance, memory-safe Web Application Firewall built with Cloudflare's Pingora framework v0.6.0 in Rust. Protects web applications from SQL injection, XSS, rate limiting abuse, and other common attacks with 15,000+ req/sec throughput and sub-7ms latency . 🚀 Features Security Protection - ✅ SQL Injection Detection - Advanced pattern matching with 15+ attack signatures, 100% detection rate - ✅ XSS Prevention - Cross-site scripting attack blocking with URL decoding - ✅ Path Traversal Detection - Block directory traversal attacks (../, encoded variants, sensitive file access) - ✅ Command Injection Detection - Prevent shell command injection (;, , &&, $(), backticks) - ✅ Rate Limiting - Per-IP request throttling with configurable windows - ✅ IP Filtering - Whitelist/blacklist with CIDR notation support (e.g., 10.0.0.0/8 ) - ✅ Bot Detection - Block malicious bots (sqlmap, nikto, scrapers) while allowing Googlebot, Bingbot - ✅ Request Body Inspection - Deep packet analysis with configurable size limits (1MB default) - ✅ Header Validation - Custom header security checks with safe header exemptions - ✅ Hot Configuration Reload - Reload WAF rules without restarting the server Performance (Benchmarked) - ⚡ 15,143 req/sec - Single instance throughput on standard hardware - ⚡ 6.60ms avg latency - Minimal overhead, 2x faster than ModSecurity - ⚡ 100% success rate - Zero errors under high load - ⚡ Memory Safe - Built in Rust","default_branch":null,"files":null,"tree":[],"storefront":"/r/AarambhDevHub","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/AarambhDevHub/pingora-waf/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}