A Go HTTP middleware that protects web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, and brute force attacks.
teler-waf is a Go HTTP middleware that integrates intrusion detection capabilities to protect web applications from common security threats. It analyzes incoming requests against known attack patterns, bad actors, and vulnerabilities, blocking malicious traffic before it reaches the application. The middleware is designed to be easily added to existing Go web servers with minimal configuration.
Go developers building web applications who need a lightweight, configurable security layer to defend against OWASP Top 10 threats, malicious bots, and known exploits without relying on external WAF services.
Developers choose teler-waf for its seamless integration with Go applications, daily updated threat datasets, and extensive customization options including custom rules and whitelists. It provides enterprise-grade security as a middleware, reducing the need for external WAF solutions.
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Covers a wide range of threats including OWASP Top 10 attacks, CVEs, bad IPs, and malicious crawlers using daily updated datasets from teler-resources.
Allows creation of custom security rules via regex patterns or a DSL, enabling tailored protection for application-specific logic and threats.
Provides a standard net/http.Handler interface, making it simple to add as middleware to most Go web frameworks like Gin or Echo without major refactoring.
Supports sending alerts to Falco Sidekick and logs to Wazuh, enhancing security monitoring and incident response capabilities.
Adds latency per request (benchmarked at thousands of nanoseconds), which can accumulate and slow down high-traffic applications, as admitted in the limitations section.
Setting up custom rules, DSL expressions, and whitelists requires advanced security knowledge, making it challenging for developers without expertise.
Under the ELv2 license, it cannot be used for cloud, hosted, or managed services without a commercial license, limiting its applicability for many business models.