GJgjvc·Nov 28, 2021Submission
Naxsi – Nginx Anti XSS and SQL Injection Module
2 points · Open discussionnbs-system
naxsi
C2014–2021
nbs-system / naxsi · Archived
naxsi
NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
10Distinct people
11Mentions
0Explicit recommenders
4.8KGitHub stars
What to know before exploring
What it is
NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year11 dated mentions
Observed mentions: 2014-04-11 10:50:22 UTC to 2021-11-28 17:56:34 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2014 | 2014-01-01 00:00:00 UTC | 2015-01-01 00:00:00 UTC | 1 | 1 | 0 |
| 2015 | 2015-01-01 00:00:00 UTC | 2016-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 5 | 1 | 4 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 1 | 1 | 0 |
What Hacker News says
11 sourcesThere's a concept that you should use several products in highly secure environments.
For example, if your input validation is written in PHP, you might want to write another layer in front, i.e. in your reverse proxy layer, using something like https://github.com/nbs-system/naxsi. The way, neither just a PHP bug nor a lua bug should defeat you.
In reality, they're probably written by the same person, and thus it's probably a logic bug that will result in a hack and, assuming a zero sum game in engineering time, I'd probably rather focus on protective monitoring than rewriting the same input validation.
But there you go. In much the same way, if you don't really believe you can trust cisco or huawei to protect against their respective governments, then you layer both and hope they keep each other in check.
In Abusing the PHP Query String Parser to Bypass IDS, IPS, and WAFyou're already running nginx, so you should be able to add naxsi (https://github.com/nbs-system/naxsi)
In Ask HN: How to stop bot onslaught on my website?It seems that the issue is fixed: https://github.com/nbs-system/naxsi/issues/227#issuecomment-...
In NAXSI – Open-Source, High Performance, Low Rules Maintenance WAF for NginxModsecurity is notoriously slow, and its rules are complex to read and to write, while the naxsi ones are simple: https://github.com/nbs-system/naxsi/blob/master/naxsi_config...
In NAXSI – Open-Source, High Performance, Low Rules Maintenance WAF for NginxSince this doesn't go well with HTTP/2 so far, we'll have to stick with ModSec for the time being.
> https://github.com/nbs-system/naxsi/issues/227
In NAXSI – Open-Source, High Performance, Low Rules Maintenance WAF for NginxNAXSI – Open-Source, High Performance, Low Rules Maintenance WAF for Nginx
41 points · Open discussionOne may also want to see NAXSI [0]. NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX.
[0] https://github.com/nbs-system/naxsi
In Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instancesI appreciate naxsi for its ease of use and efficiency: https://github.com/nbs-system/naxsi
In FreeWAF – High-Performance WAF Built on the OpenResty StackNAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
2 points · Open discussionNginx Anti Xss and Sql Injection.
2 points · Open discussion