DEV Community

禾 profile picture

禾

DevOps engineer working with self-hosted infra & security tools

Joined Joined on 
Proxy Protocol vs Forwarded Headers: Preserving the Real Client IP Behind SafeLine WAF

Proxy Protocol vs Forwarded Headers: Preserving the Real Client IP Behind SafeLine WAF

Comments
4 min read

Want to connect with 禾?

Create an account to connect with 禾. You can also sign in below to proceed if you already have an account.

Already have an account? Sign in
A vs B: SafeLine Front Door Versus Direct Origin Health Checks

A vs B: SafeLine Front Door Versus Direct Origin Health Checks

Comments
6 min read
Listener TLS vs Upstream TLS: How to Place a TLS 1.2 and TLS 1.3 Requirement

Listener TLS vs Upstream TLS: How to Place a TLS 1.2 and TLS 1.3 Requirement

Comments
6 min read
WAF Listener vs Origin TLS: How to Place an HTTPS Certificate

WAF Listener vs Origin TLS: How to Place an HTTPS Certificate

Comments
6 min read
A vs B: Point Your Domain at the WAF IP or Route Through an Edge Layer

A vs B: Point Your Domain at the WAF IP or Route Through an Edge Layer

Comments
4 min read
A vs B: Terminate Traffic at the WAF or Forward from a Reverse Proxy

A vs B: Terminate Traffic at the WAF or Forward from a Reverse Proxy

Comments
3 min read
A vs B: Hand-Editing .env vs Scripting Secrets for Manual WAF Deploy

A vs B: Hand-Editing .env vs Scripting Secrets for Manual WAF Deploy

Comments
4 min read
A vs B: Moving SafeLine LTS to the Latest Release — Jump Now or Wait a Month

A vs B: Moving SafeLine LTS to the Latest Release — Jump Now or Wait a Month

Comments
4 min read
x86_64 Proxy vs ARM64 Host: Where to Place SafeLine

x86_64 Proxy vs ARM64 Host: Where to Place SafeLine

Comments
7 min read
Dedicated Directory vs Shared Path: How to Uninstall a Self-Hosted WAF

Dedicated Directory vs Shared Path: How to Uninstall a Self-Hosted WAF

Comments
5 min read
A vs B: Change the SafeLine Web Console Port with MGT_PORT or a Fronting Proxy

A vs B: Change the SafeLine Web Console Port with MGT_PORT or a Fronting Proxy

Comments
3 min read
Direct Host vs Proxied Console: How to Reset the WAF Admin Account Inside Docker

Direct Host vs Proxied Console: How to Reset the WAF Admin Account Inside Docker

Comments
6 min read
Official Manager Script vs Manual Compose: Which Linux Install Should You Run?

Official Manager Script vs Manual Compose: Which Linux Install Should You Run?

Comments
6 min read
Why I Verify Docker Compose and SSSE3 Before Any WAF Install

Why I Verify Docker Compose and SSSE3 Before Any WAF Install

Comments
5 min read
How to Decide Whether a WAF Should Front Your Flask or Django App

How to Decide Whether a WAF Should Front Your Flask or Django App

Comments
6 min read
Why I Review SafeLine WAF Features Before Any Pricing Verdict

Why I Review SafeLine WAF Features Before Any Pricing Verdict

Comments
6 min read
How to Place Automatic HTTPS Beside a Reverse-Proxy WAF

How to Place Automatic HTTPS Beside a Reverse-Proxy WAF

Comments
6 min read
How to Check a WAF Before Placing It Behind a CDN

How to Check a WAF Before Placing It Behind a CDN

Comments
6 min read
How to Check Whether Traffic Can Bypass the WAF After a PHP Advisory

How to Check Whether Traffic Can Bypass the WAF After a PHP Advisory

5
Comments
2 min read
How PHP-FPM Worker State Can Carry Risk Between Requests

How PHP-FPM Worker State Can Carry Risk Between Requests

5
Comments
2 min read
Why I Will Not Whitelist an IP Until SafeLine Documents the Control

Why I Will Not Whitelist an IP Until SafeLine Documents the Control

Comments
6 min read
How to Configure Rate Limiting with a WAF Without Locking Out Real Users

How to Configure Rate Limiting with a WAF Without Locking Out Real Users

Comments
6 min read
How to Test If Your WAF Is Working: Block Page and Attack Log

How to Test If Your WAF Is Working: Block Page and Attack Log

5
Comments
6 min read
How to Reduce WAF False Positives Without Guessing

How to Reduce WAF False Positives Without Guessing

Comments
6 min read
How to Decide If a Homelab WAF Fits Your Self-Hosted Apps

How to Decide If a Homelab WAF Fits Your Self-Hosted Apps

Comments
8 min read
Why I Do Not Enable Every WAF Control on Every Store Page

Why I Do Not Enable Every WAF Control on Every Store Page

Comments
6 min read
How to Decide If a WAF Can Sit in Front of Next.js

How to Decide If a WAF Can Sit in Front of Next.js

Comments
5 min read
How to Protect a Node.js App with a Reverse Proxy WAF

How to Protect a Node.js App with a Reverse Proxy WAF

Comments
6 min read
Why I Put a Reverse-Proxy WAF in Front of Laravel

Why I Put a Reverse-Proxy WAF in Front of Laravel

Comments
5 min read
How to Protect a GraphQL API with a Reverse-Proxy WAF

How to Protect a GraphQL API with a Reverse-Proxy WAF

Comments
7 min read
How to Protect a Microservices Architecture with a WAF Without Losing Service Ownership

How to Protect a Microservices Architecture with a WAF Without Losing Service Ownership

Comments
4 min read
How to Run SafeLine WAF in Docker Swarm: A Deployment Decision Guide

How to Run SafeLine WAF in Docker Swarm: A Deployment Decision Guide

Comments
3 min read
How to Deploy SafeLine WAF with Traefik Safely: A Routing Checklist

How to Deploy SafeLine WAF with Traefik Safely: A Routing Checklist

Comments
4 min read
How to Install SafeLine WAF on Raspberry Pi: A Compatibility-First Checklist

How to Install SafeLine WAF on Raspberry Pi: A Compatibility-First Checklist

Comments
3 min read
How to Install SafeLine WAF on Debian: A Preflight-to-Cutover Checklist

How to Install SafeLine WAF on Debian: A Preflight-to-Cutover Checklist

Comments
4 min read
How to Plan a SafeLine WAF Installation on CentOS with Readiness Checks

How to Plan a SafeLine WAF Installation on CentOS with Readiness Checks

Comments
4 min read
How to Choose a Reverse Proxy WAF Deployment

How to Choose a Reverse Proxy WAF Deployment

Comments
1 min read
How to Test Rule-Based and Semantic WAF Protection

How to Test Rule-Based and Semantic WAF Protection

5
Comments
2 min read
5 Docker Security Mistakes I Learned the Hard Way

5 Docker Security Mistakes I Learned the Hard Way

5
Comments
8 min read
How I Added a Self-Hosted WAF to My Docker Stack in 15 Minutes

How I Added a Self-Hosted WAF to My Docker Stack in 15 Minutes

5
Comments
2 min read
loading...