How to use aaWAF This tutorial skips the construction of the source website. By default, your website can be accessed normally before using aaWAF. Before using aaWAF Website architecture before using aaWAF: Users access the website server directly As shown in the figure: User --> Website server Website domain and A record information: website domain: 156.kern123.tk website domain A record ip：192.168.66.152 After using aaWAF Website architecture after using aaWAF: User access aaWAF and then forwarded to website server Add a new server ip：192.168.66.156 As shown in the figure: User --> aaWAF --> Website server Protect website and website domain: 156.kern123.tk aaWAF, Protect website A record IP：192.168.66.156 Website server ip (Source address)：192.168.66.152 Install aaWAF aaWAF install tutorial： install aaWAF I’ll skip the install here. After the install is complete, login aaWAF and add protected website Add protected website Website --> Add Website Protected domain: 156.kern123.tk Source address：192.168.66.152 The website of the website server does not have an ssl certificate setup, so use http It can be used if an SSL certificate is setup https If the website uses Forced HTTPS , please use https and deploy an SSL certificate, otherwise it will prompt you with too many redirects. Tip: Enter according to your actual situation, Check domain may not be accurate Add protected website is complete Modify A record IP of the website domain name to IP of the aaWAF server. Please go to the domain name vendor modify the A record. Modify from 192.168.66.152 to 192.168.66.156 Tip: Modify domain A record will take 1 to 10 minutes (or more) to take effect. From 192.168.66.152 Modify to 192.168.66.156 How check whether A record is valid: For Windows systems, can use Win+R or click the "Start" button in the lower left corner open the "Start" menu, open "Run", enter cmd and press Enter. At the command prompt enter nslookup domain Test aaWAF After A record of domain takes effect Test whether aaWAF is used successfully Browser accesses domain Use browser access website domain name： http://156.kern123.tk if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } Successfully accessed the website: Test whether the protection is effective? Use browser access malicious link: http://156.kern123.tk/?id=/etc/passwd if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } Protection takes effect: View access data from aaWAF Overview Requests today 、 Malicious requests increased by 1 Website --> 156.kern123.tk Today Requests/Block increased by 1 Tutorial summary Increase: Add server install aaWAF Add protected website in aaWAF Modify: Modify A record IP of the website domain to aaWAF IP Unchanged: Website server configuration remains unchanged Domain name the user visits remains unchanged If cannot solve it or have problems during use, please Start a Discussion in the forum.

can we use AaWAF and Cloudflare in the same time ? and can we install AaWAF and AaPanel in the same VPS ?

Hello, it is not recommended to install on the same server. Generally, port 80 443 is already used when aapaenl is installed. Can be used with Cloudflare at the same time. Please enable CDN when using it. aaP_abdillah_pandu0

i am little confused where is file manager and all the thhings which is available in normal aapanel ?

Hello, I suggest you describe the problem in detail. aaP_sagarkumarsahu60

How to change the language of aaWAF, after FIX the language became Chinese. And how to change the panel time?

Hello, what command did you execute to upgrade? aaP_bybihhi

aaPanel_Kern I didn't do any commands, just clicked the FIX button and then the language became Chinese.

aaP_bybihhi Execute command to repair curl -k https://node.aapanel.com/cloudwaf_en/scripts/update_cloudwaf_en.sh |bash aaP_bybihhi

Can the source be directed to a Docker container?

Hello, We was successfully install aaWAF Free in offline mode. Now we want to restrict working area just to one region (not China), are system have requirement to full access to internet area? May be system have some syncing process or they do license checking? Thank you

aaWAF usage tutorial

taphuocanh94

aaPanel_Kern

Now, I can not use it. The websites behind cannot access, and WAF no longer receives any more visits, accompanied by a failure notice when I access webadmin.

aaPanel_Kern

Hello, is it possible to solve the problem by trying the following command?

du -sh /var/lib/docker/overlay2/* && df -h
aa=$(docker inspect -f '{{ .GraphDriver.Data.MergedDir }}' cloudwaf_nginx) && echo ${aa} && cd ${aa} && rm -f core.*

cc=$(docker inspect -f '{{ .GraphDriver.Data.UpperDir }}' cloudwaf_nginx) && echo ${cc} && cd ${cc} && rm -f core.*

taphuocanh94

aaPanel_Kern
I can not logged in to web admin after execute this command. Logged credentials is not right.
I was install a new with 100GB disk storage on Centos 8.

aaPanel_Kern

Hi, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
It is recommended to fill in the following
Post link:
SSH IP address, account password and port:
aapanel login link address and account password:

No post link will not be able to know which user's information is, and the problem will not be processed

taphuocanh94

aaPanel_Kern
It is good if you can assist. But now I am using a new installation and it is working stably. However, there is a problem in the past, which is the map that does not display the color for the access levels in the regions.

aaPanel_Kern

Hello, thank you for using the map. The map is a known issue.

taphuocanh94

My waf continues to have problems. I received an error message "404 not found
nginx "When accessing webadmin. The installed websites are still active. Please tell me what I should do.

aaP_marian007p

Any idea why I can't add any website to the aaWAF?
Purchased a ne server from hetzner, released the ports:

Installed aawaf and after that instralled aapanel.
Where is the issue?

Also pasted the certificate, and tried all combinations, but not working to add any website on aawaf.

aaP_hareeshnarayan1982

If anyone have issues, i suggest to try safeline waf, its also good.

malhuda2

Please add support Origin IPv6, and support more_set_headers

Mrqz

How to disable TLS 1.1 properly?
We are trying to disable TLS 1.1 through the web interface, but SSL Labs still shows it as enabled. Is there something we might be missing? Are there additional steps required (e.g., direct config file updates) to fully disable TLS 1.1?

aaPanel_Kern

Hello, check whether the configuration in this directory has corresponding configurations. After modification, restarting the service will be restored to the default
/www/cloud_waf/nginx/conf.d/vhost/0.default.conf
/www/cloud_waf/nginx/conf.d/vhost/
Restart nginx: btw nginx_restart
Mrqz

dhanyg

Hello, I have followed the instruction for adding website to aawaf, when I run Simulated Attack, the website still could be opened, whereas it should be blocked by aawaf and displayed aawaf blocking page.

dhanyg

dhanyg
Looks like because I turn on the cache, when cache is disabled the waf works properly. Can you guys provide a documentation about aaWAF? I have some questions like how to create custom rule. There are many options of type, rule. and match content. I tried use regex for match uri but didn't work. Thanks.

dhanyg

aaPanel_Kern
Hello, what is the configuration for litespeed and apache web server?

aaPanel_Kern

Hello, same, this is the reverse proxy used, suitable for nginx, apache, openlititespeed, etc.

dhanyg

aaPanel_Kern

Hello, I use CSF & LFD for failure login alert. When a failure login happened, it showed the aaWAF's ip address, not the actual attacker's ip address. Is there any configurations should I change? The web server is Litespeed Enterprise. Thanks.

aaPanel_Kern

Hello, you can refer to the official document configuration to display the real user IP
Change 103.21.244.0/22 to the IP of WAF, T must be retained

accessControl  {
  allow                   ALL, 103.21.244.0/22T
}
useIpInProxyHeader 2

dhanyg

kominfo_bengkulukota

This is a graph on our Aawaf. We currently have around 5,000 active users who check in on our app at certain times. While normal Aawaf usage is under control, during a simultaneous attendance period, the graph above shows what happens. Users are unable to access the app, but access returns to normal after a while.

Below are our IP block rule settings. Do you have any suggestions for our best Aawaf settings?
or which part should I set so that simultaneous access can be normal

aaP_dixyhardian

#ask
how to clean log ?

this button not working

« Previous Page Next Page »