WAF Implementation Guides

Coraza Web Application Firewall intermediate

How to Add WAF Protection to Apache

Two approaches to protect Apache with a WAF. Use ModSecurity as a native Apache module, or replace Apache with Caddy+Coraza for a simpler, modern setup with the same OWASP CRS rules.

30-45 minutes 7 steps

Coraza Web Application Firewall intermediate

How to Add WAF Protection to Nginx

Two tested approaches to protect your Nginx web server with a WAF. Add Coraza as a reverse proxy in front of Nginx, or replace Nginx entirely with Caddy+Coraza for a single-container solution.

20-40 minutes 8 steps

AWS Web Application Firewall intermediate

How to Configure AWS WAF with Application Load Balancer

Learn how to protect your AWS applications by attaching AWS WAF to an Application Load Balancer with managed rule groups.

30-45 minutes 7 steps

ModSecurity Open Source WAF intermediate

How to Install and Configure ModSecurity with NGINX

Complete guide to deploying ModSecurity 3.x with NGINX for free, open-source WAF protection using the OWASP Core Rule Set.

45-60 minutes 10 steps

Coraza Web Application Firewall intermediate

How to Protect Nginx with Coraza WAF Using Docker

Step-by-step guide to deploying Coraza WAF as a reverse proxy in front of Nginx using Docker and docker-compose, with OWASP CRS protection out of the box.

20-30 minutes 11 steps

Cloudflare Web Application Firewall beginner

How to Set Up Cloudflare WAF for WordPress

Step-by-step guide to configuring Cloudflare Web Application Firewall to protect your WordPress site from attacks.

15-30 minutes 6 steps

Coraza Web Application Firewall intermediate

Migrate from Apache to Caddy + Coraza WAF

Step-by-step migration guide for replacing Apache with Caddy and the Coraza WAF plugin. Covers inventory, .htaccess conversion, PHP-FPM setup, gradual cutover, and rollback strategy.

3-5 hours 6 steps

Coraza Web Application Firewall intermediate

Migrate from Nginx to Caddy + Coraza WAF

Step-by-step migration guide for replacing Nginx with Caddy and the Coraza WAF plugin. Covers pre-migration checklist, config conversion, gradual cutover, rollback plan, and post-migration validation.

2-4 hours 7 steps

General intermediate

WAF Security Best Practices Guide

Essential best practices for configuring and maintaining your Web Application Firewall for optimal security.

20-30 minutes 6 steps