agebhar1/system-design-playground
GitHub: agebhar1/system-design-playground
基于 Vagrant 和 Ansible 的 nginx + ModSecurity WAF 安全防护实验环境,用于学习 Web 应用防火墙配置和系统架构实践。
Stars: 0 | Forks: 0
# 系统设计演练场
## 构建
```
$ vagrant up
$ ansible-playbook webservers.yml
…
$ curl 192.168.56.{2,3}
Welcome to nginx!
403 Forbidden
nginx/1.26.3
…
```
## 链接
- https://coreruleset.org/
- https://github.com/SpiderLabs/ModSecurity
- https://github.com/SpiderLabs/ModSecurity-nginx
- https://nginx.org/en/download.html
- https://nginx.org/en/docs/njs/
- https://github.com/nginx/njs-examples
- https://nginx.org/en/docs/njs/typescript.html
- https://www.nginx.com/blog/compiling-and-installing-modsecurity-for-open-source-nginx/
- https://www.nginx.com/blog/deploying-nginx-plus-as-an-api-gateway-part-1/
- https://www.nginx.com/resources/wiki/start/topics/examples/logrotation/
- https://www.digitalocean.com/community/tutorials/how-to-configure-logging-and-log-rotation-in-nginx-on-an-ubuntu-vps
- https://www.englert.one/logrotate-tutorial
- https://bellard.org/quickjs/
- https://documentation.suse.com/smart/systems-management/html/systemd-working-with-timers/index.html
- https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html
- https://www.freedesktop.org/software/systemd/man/latest/systemd.timer.html
Welcome to nginx!
If you see this page, the nginx web server is successfully installed and working. Further configuration is required.
For online documentation and support please refer to
nginx.org.
Commercial support is available at
nginx.com.
Thank you for using nginx.
… $ curl -H 'User-Agent: nessus' -H 'X-Request-ID: 1' 192.168.56.{2,3}403 Forbidden
标签:Ansible, API网关, AppImage, CISA项目, CMS安全, CoreRuleSet, CVE, DevSecOps, GitHub Advanced Security, JavaScript, Logrotate, ModSecurity, Nessus, Nginx, NJS, OPA, OWASP CRS, QuickJS, Streamlit, Systemd, TypeScript, Vagrant, WAF, Web安全, Web应用防火墙, Web服务器, 上游代理, 中间件, 反向代理, 安全加固, 安全插件, 安全测试, 开源, 攻击性安全, 教程, 数字签名, 数据展示, 日志轮转, 特权提升, 私有化部署, 系统提示词, 系统设计, 红队, 网络安全, 自动化部署, 蓝队分析, 访问控制, 负载均衡, 边缘计算, 配置修复, 防御规避, 隐私保护, 靶场