softonic/wafwatcher repository overview
WAF watcher
Daemon running in k8s that query WAF Fastly nextGen and check the blacklisted IPs and add these IPs to the VCL ACL Fastly CDN Varnish.
Run in local
git clone https://github.com/softonic/WAFWatcher.git
cd WAFWatcher
export WAF_ENDPOINT="xxx"
export WAF_API_USER="[email protected]"
export WAF_API_TOKEN="xxx"
export FASTLY_ENDPOINT="https://api.fastly.com"
export FASTLY_API_KEY="xxx"
export FASTLY_SID="xxx"
export FASTLY_ACL_NAME="WAF_Blocked_IPs"
./WAFWatcher
+-----------------------------------+
| ServiceManager |
| |
| +-----------------------------+ |
| | Initialize Channels | |
| +-----------------------------+ |
| | Start WAFClient Manage | |
| +-----------------------------+ |
| | Start FastlyClient Manage | |
| +-----------------------------+ |
| | Daemon Loop | |
| +-----------------------------+ |
| |
+-----------------------------------+
| |
| |
v v
+---------------------------+ +--------------------------+
| WAFClient | | FastlyClient |
| | | |
| +---------------------+ | | +---------------------+ |
| | Periodic Read from | | | | Receive IP Entries | |
| | WAF API | | | | from Channel | |
| +---------------------+ | | +---------------------+ |
| | Send IP Entries to | | | | Update Fastly ACL | |
| | Channel | | | +---------------------+ |
| +---------------------+ | | |
| | | |
+---------------------------+ +--------------------------+
Tag summary
Content type
Image
Digest
sha256:4059809f2…
Size
12.4 MB
Last updated
9 months ago
docker pull softonic/wafwatcher