How to use aaWAF This tutorial skips the construction of the source website. By default, your website can be accessed normally before using aaWAF. Before using aaWAF Website architecture before using aaWAF: Users access the website server directly As shown in the figure: User --> Website server Website domain and A record information: website domain: 156.kern123.tk website domain A record ip：192.168.66.152 After using aaWAF Website architecture after using aaWAF: User access aaWAF and then forwarded to website server Add a new server ip：192.168.66.156 As shown in the figure: User --> aaWAF --> Website server Protect website and website domain: 156.kern123.tk aaWAF, Protect website A record IP：192.168.66.156 Website server ip (Source address)：192.168.66.152 Install aaWAF aaWAF install tutorial： install aaWAF I’ll skip the install here. After the install is complete, login aaWAF and add protected website Add protected website Website --> Add Website Protected domain: 156.kern123.tk Source address：192.168.66.152 The website of the website server does not have an ssl certificate setup, so use http It can be used if an SSL certificate is setup https If the website uses Forced HTTPS , please use https and deploy an SSL certificate, otherwise it will prompt you with too many redirects. Tip: Enter according to your actual situation, Check domain may not be accurate Add protected website is complete Modify A record IP of the website domain name to IP of the aaWAF server. Please go to the domain name vendor modify the A record. Modify from 192.168.66.152 to 192.168.66.156 Tip: Modify domain A record will take 1 to 10 minutes (or more) to take effect. From 192.168.66.152 Modify to 192.168.66.156 How check whether A record is valid: For Windows systems, can use Win+R or click the "Start" button in the lower left corner open the "Start" menu, open "Run", enter cmd and press Enter. At the command prompt enter nslookup domain Test aaWAF After A record of domain takes effect Test whether aaWAF is used successfully Browser accesses domain Use browser access website domain name： http://156.kern123.tk if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } Successfully accessed the website: Test whether the protection is effective? Use browser access malicious link: http://156.kern123.tk/?id=/etc/passwd if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } Protection takes effect: View access data from aaWAF Overview Requests today 、 Malicious requests increased by 1 Website --> 156.kern123.tk Today Requests/Block increased by 1 Tutorial summary Increase: Add server install aaWAF Add protected website in aaWAF Modify: Modify A record IP of the website domain to aaWAF IP Unchanged: Website server configuration remains unchanged Domain name the user visits remains unchanged If cannot solve it or have problems during use, please Start a Discussion in the forum.

can we use AaWAF and Cloudflare in the same time ? and can we install AaWAF and AaPanel in the same VPS ?

Hello, it is not recommended to install on the same server. Generally, port 80 443 is already used when aapaenl is installed. Can be used with Cloudflare at the same time. Please enable CDN when using it. aaP_abdillah_pandu0

i am little confused where is file manager and all the thhings which is available in normal aapanel ?

Hello, I suggest you describe the problem in detail. aaP_sagarkumarsahu60

How to change the language of aaWAF, after FIX the language became Chinese. And how to change the panel time?

Hello, what command did you execute to upgrade? aaP_bybihhi

aaPanel_Kern I didn't do any commands, just clicked the FIX button and then the language became Chinese.

aaP_bybihhi Execute command to repair curl -k https://node.aapanel.com/cloudwaf_en/scripts/update_cloudwaf_en.sh |bash aaP_bybihhi

Can the source be directed to a Docker container?

Hello, We was successfully install aaWAF Free in offline mode. Now we want to restrict working area just to one region (not China), are system have requirement to full access to internet area? May be system have some syncing process or they do license checking? Thank you

aaWAF usage tutorial

aaP_autoowo2

How to get real client IP from aawaf to my website??

aaPanel_Kern

Hello, if the web service of the website server is nginx, you can add this configuration under the site:

    set_real_ip_from 0.0.0.0/0 ;
    real_ip_header X-Forwarded-For;
    real_ip_recursive on;

aaP_autoowo2

dhanyg

aaPanel_Kern
Hello, what is the configuration for litespeed and apache web server?

taphuocanh94

I just move website to other server, so How can I change source address for website on waf?
Thank.

aaPanel_Kern

Is it possible to modify the back-to-origin configuration directly under website configuration?

taphuocanh94

aaPanel_Kern Thank you for your answer, I subjectively ignored this settings, this is my fault.
So usually the drive capacity is recommended, I used a VPS with 50GB, and I found that the software used a docker program to use this whole capacity.

So usually the size of the drive capacity is recommended? I used a VPS with 50GB, and I found that the software used a docker program to use this whole capacity.

aaPanel_Kern

Hello, how much free space is left now? This requires checking how much website logs and docker logs occupy

taphuocanh94

aaPanel_Kern

Now, I can not use it. The websites behind cannot access, and WAF no longer receives any more visits, accompanied by a failure notice when I access webadmin.

aaPanel_Kern

Hello, is it possible to solve the problem by trying the following command?

du -sh /var/lib/docker/overlay2/* && df -h
aa=$(docker inspect -f '{{ .GraphDriver.Data.MergedDir }}' cloudwaf_nginx) && echo ${aa} && cd ${aa} && rm -f core.*

cc=$(docker inspect -f '{{ .GraphDriver.Data.UpperDir }}' cloudwaf_nginx) && echo ${cc} && cd ${cc} && rm -f core.*

taphuocanh94

aaPanel_Kern
I can not logged in to web admin after execute this command. Logged credentials is not right.
I was install a new with 100GB disk storage on Centos 8.

aaPanel_Kern

Hi, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
It is recommended to fill in the following
Post link:
SSH IP address, account password and port:
aapanel login link address and account password:

No post link will not be able to know which user's information is, and the problem will not be processed

taphuocanh94

aaPanel_Kern
It is good if you can assist. But now I am using a new installation and it is working stably. However, there is a problem in the past, which is the map that does not display the color for the access levels in the regions.

aaPanel_Kern

Hello, thank you for using the map. The map is a known issue.

taphuocanh94

My waf continues to have problems. I received an error message "404 not found
nginx "When accessing webadmin. The installed websites are still active. Please tell me what I should do.

aaP_marian007p

Any idea why I can't add any website to the aaWAF?
Purchased a ne server from hetzner, released the ports:

Installed aawaf and after that instralled aapanel.
Where is the issue?

Also pasted the certificate, and tried all combinations, but not working to add any website on aawaf.

aaP_hareeshnarayan1982

If anyone have issues, i suggest to try safeline waf, its also good.

malhuda2

Please add support Origin IPv6, and support more_set_headers

Mrqz

How to disable TLS 1.1 properly?
We are trying to disable TLS 1.1 through the web interface, but SSL Labs still shows it as enabled. Is there something we might be missing? Are there additional steps required (e.g., direct config file updates) to fully disable TLS 1.1?

aaPanel_Kern

Hello, check whether the configuration in this directory has corresponding configurations. After modification, restarting the service will be restored to the default
/www/cloud_waf/nginx/conf.d/vhost/0.default.conf
/www/cloud_waf/nginx/conf.d/vhost/
Restart nginx: btw nginx_restart
Mrqz

dhanyg

Hello, I have followed the instruction for adding website to aawaf, when I run Simulated Attack, the website still could be opened, whereas it should be blocked by aawaf and displayed aawaf blocking page.

dhanyg

dhanyg
Looks like because I turn on the cache, when cache is disabled the waf works properly. Can you guys provide a documentation about aaWAF? I have some questions like how to create custom rule. There are many options of type, rule. and match content. I tried use regex for match uri but didn't work. Thanks.

« Previous Page Next Page »