On 10.11.20 17:52, Thomas SIMON wrote: > Hi all, > > Is there a way to use some mecanism (spoe or other) to use modsecurity v3 > with haproxy (2.x) ? > I found documentation on modsecurity v2 integration with spoe , but nothing > on v3. > > My goal is to protect backends with modsecurity using owasp CRS. > > I've setup a nginx with modsecurity v3 on another server, and l'd like to proxy > requests on this server for filtering before processing authorized traffic on backends.
Well v3 is a complete different beast, afaik. Just a wild Idea. You can try to use the same concept as Tim in the auth proxy lua as long as no v3 implementation is available. https://github.com/TimWolla/haproxy-auth-request The "Auth Server" is the modsecurity server. I have take a look into the v3 but it's not a easy task, so I don't know how and when I can proceed with some sort of implementation. > best regards > thomas Hth Alex
