bunkerity/bunkerized-nginx

Features

• Reverse Proxies - Routes all incoming traffic through a hardened Nginx instance to apply security filters before reaching backend services.
• Reverse Proxy Security - Provides a secure reverse proxy that protects web applications from malicious requests by default.
• Service Discovery - Automatically detects container labels and resource tags to update security settings in real time.
• Container Label Routing - Automatically generates proxy routing rules based on container metadata labels within the orchestration system.
• Automated IP Banning - Implements an automated mechanism to block IP addresses that exhibit malicious behavior based on HTTP status codes.
• Containerized Security Automation - Automatically updates security settings and firewall rules by monitoring container labels within a cloud-native orchestrator.
• HTTP Request Filtering - Inspects and filters incoming HTTP requests against security signatures to block malicious traffic in real time.
• IP Blacklisting - Prevents access from known attackers by utilizing external and DNS-based IP blacklists.
• Web Application Firewalls - Provides a gateway to monitor and filter incoming web traffic to protect applications from common cyber attacks.
• SSL Certificate Managers - Provides automated generation and maintenance of SSL/TLS certificates through external authorities.
• Traffic Filtering - Filters malicious traffic using a combination of IP blacklists, CAPTCHAs, and real-time request inspection.
• Web Application Firewalls - BunkerWeb evaluates incoming traffic using a firewall engine to identify and block malicious request patterns in real time.
• Web Application Security - Safeguards web services from unauthorized access by filtering malicious traffic and tuning security settings.
• Multi-Site Hosting - Serves multiple web applications from a single instance by assigning unique settings to each server name.
• Server and Site Configuration - Applies security and performance rules to specific domains using unique prefixes in a multisite environment.
• Connection Rate Limiting - Restricts the number of concurrent connections and requests per client to prevent server resource exhaustion.
• Bot Blocking - Blocks automated bots by requiring the completion of verification tasks such as CAPTCHAs, JavaScript, or cookies.
• Malware Scanning - Analyzes uploaded files using antivirus engines or external APIs to block requests containing malicious content.
• HTTP Security Headers - Implements security-focused HTTP response headers and tightens TLS settings to reduce the attack surface.
• WAF Event Analysis - Tracks blocked attacks and analyzes system logs to identify malicious traffic patterns.
• Security Rule Interfaces - Provides a graphical interface for managing web application firewall settings and security plugins.
• Web-Based Configuration Generators - Translates graphical user input into server configuration files for managing firewall settings.
• Web-Based Configuration Dashboards - Offers a web-based dashboard to configure security settings and manage instances without command line interaction.
• Modular Plugin Architectures - Provides a modular architecture allowing the loading of independent security extensions and plugins.
• Firewall Rule Configurations - Allows the definition of custom security rules and configurations to handle specific use cases and false positives.
• Security Event Monitoring - Displays blocked attacks and provides system log searching to identify and analyze malicious traffic patterns.
• Reverse Proxy Path Mappings - Maps multiple URL paths to different backend hosts by assigning groups of proxy settings.
• Container Management - Hardened Nginx image with secure defaults.
• Proxy and Infrastructure - Secure-by-default Docker image for server deployments.

Star history