kubeWAF is under active development — feedback and stars on GitHub are very welcome!
kubeWAFkubeWAF
kubeWAFmodsecurity-proxy-wasmpow-proxy-wasm

Overview

Stateless browser proof-of-work challenge filter for Envoy

pow-proxy-wasm (published artifact: challenge-proxy-wasm) is a lightweight, stateless browser Proof-of-Work (PoW) filter for Envoy and Envoy-based data planes.

Repositorygithub.com/kubewaf-io/pow-proxy-wasm
LanguageGo (proxy-wasm-go-sdk, GOOS=wasip1)
Artifactchallenge-proxy-wasm.wasm

This is a standalone documentation root for the challenge filter.

  • Enabling challenge on a kubeWAF WAF resource? Use the kubeWAF challenge guide (spec.challenge properties).
  • Filter internals / standalone Envoy? Stay in this tree.

Pages in this root

How it works

Request path, cookies, crypto, IP binding, dynamic difficulty.

Configuration

Raw plugin JSON fields for Envoy.

Standalone Envoy

Build, docker-compose example, layout.

Troubleshooting

Common failure modes for the filter itself.

How it works

Request path, cookies, cryptography, IP binding, dynamic difficulty

On this page

Pages in this root