OWASP VFW Project

Main
VFW (Varnish FireWall) Project Home Page Purpose: The purpose of this project is to mitigate web applications threats using Varnish. Varnish (https://www.varnish-cache.org/) is a modern, very flexible and scalable reverse-proxy system which supports VCL, a wonderful domain-specific language to deal with HTTP (to handle headers, routing, rewrite and block requests, etc). Nowadays, many big Internet services are behind Varnish and we can bring some security policies to it.

In another words: Varnish as a Web Application Firewall; A kind of mod_security for Varnish; Varnish security filters.

License: Apache License 2.0

Project Leader(s): Eduardo S. Scarpellini

Source Code: https://github.com/scarpellini/VFW