Skip to content
You are viewing the latest documentation for Solo Enterprise for kgateway. To access the documentation for older versions, use the version switcher.

Web Application Firewall (WAF)

Page as Markdown
Protect your apps from web attacks by creating a WAFPolicy and applying it to your routes with an EnterpriseKgatewayTrafficPolicy.
About WAF
Learn more about how WAF is implemented in Solo Enterprise for kgateway.
Enable the WAF server
Deploy the WAF server as a shared extension and enable it for a GatewayClass.
OWASP Core Rule Set
Enable the bundled OWASP Core Rule Set (CRS) to protect against a broad range of common web attacks.
IP-based filtering
Block or allow traffic based on the client IP address or CIDR range.
Custom Coraza rules
Write your own Coraza SecLang rules inline or load them from a ConfigMap to enforce …
Operations
Rate limiting
Was this page helpful?