Does Caddy have some kind of WAF?


(xet7) #1

Hi,
does Caddy have some kind of WAF or some way to protect Meteor.js Node/MongoDB app that is behind Caddy proxy?

Logs for current problem are here:

Currently I have this config. http/1.1 if for compatibility with Firefox inspect console, that only supports http/1.1

boards.example.com {
	tls {
	    alpn http/1.1
	}
	proxy / localhost:3001 {
	  websocket
	  transparent
	}
}

(Matthew Fay) #2

Hi @xet7,

Caddy itself is not a WAF. I’d guess that WAF-like behaviours could be implemented easily as a plugin, though.