Google Cloud Armor | 老洪的 IT 學習系統

Ref:

Cloud Armor Preconfigured WAF Rules Codelab
https://codelabs.developers.google.com/codelabs/cloudnet-ca-waf-rules#0
Google Cloud Armor custom rules language reference
https://cloud.google.com/armor/docs/rules-language-reference
Tuning Google Cloud Armor WAF rules
https://cloud.google.com/armor/docs/rule-tuning

php-stable

evaluatePreconfiguredExpr('php-stable', 
['owasp-crs-v030001-id933151-php', 
 'owasp-crs-v030001-id933131-php', 
 'owasp-crs-v030001-id933161-php', 
 'owasp-crs-v030001-id933111-php']) 
|| evaluatePreconfiguredExpr('sessionfixation-canary') 
|| evaluatePreconfiguredExpr('cve-canary', 
['owasp-crs-v030001-id244228-cve',
 'owasp-crs-v030001-id344228-cve'])

lfi/rce/rfi/methodenforcement/scannerdetection

evaluatePreconfiguredExpr('lfi-canary', 
['owasp-crs-v030001-id930100-lfi','owasp-crs-v030001-id930110-lfi']) 
|| evaluatePreconfiguredExpr('rce-canary',
	['owasp-crs-v030001-id932130-rce']) 
|| evaluatePreconfiguredExpr('rfi-canary',
	['owasp-crs-v030001-id931130-rfi']) 
|| evaluatePreconfiguredExpr('methodenforcement-canary') 
|| evaluatePreconfiguredExpr('scannerdetection-stable',
	['owasp-crs-v030001-id913101-scannerdetection',
	 'owasp-crs-v030001-id913102-scannerdetection'])

sqli/xss

evaluatePreconfiguredExpr('sqli-stable', 
[ 'owasp-crs-v030001-id942110-sqli',
  'owasp-crs-v030001-id942120-sqli',
  'owasp-crs-v030001-id942150-sqli',
  'owasp-crs-v030001-id942180-sqli',
  'owasp-crs-v030001-id942200-sqli',
  'owasp-crs-v030001-id942210-sqli',
  'owasp-crs-v030001-id942260-sqli',
  'owasp-crs-v030001-id942300-sqli',
  'owasp-crs-v030001-id942310-sqli',
  'owasp-crs-v030001-id942330-sqli',
  'owasp-crs-v030001-id942340-sqli',
  'owasp-crs-v030001-id942380-sqli',
  'owasp-crs-v030001-id942390-sqli',
  'owasp-crs-v030001-id942400-sqli',
  'owasp-crs-v030001-id942410-sqli',
  'owasp-crs-v030001-id942430-sqli',
  'owasp-crs-v030001-id942440-sqli',
  'owasp-crs-v030001-id942450-sqli',
  'owasp-crs-v030001-id942251-sqli',
  'owasp-crs-v030001-id942420-sqli',
  'owasp-crs-v030001-id942431-sqli',
  'owasp-crs-v030001-id942460-sqli',
  'owasp-crs-v030001-id942421-sqli',
  'owasp-crs-v030001-id942432-sqli',
  'owasp-crs-v030001-id942160-sqli',
  'owasp-crs-v030001-id942190-sqli',
  'owasp-crs-v030001-id942280-sqli',
  'owasp-crs-v030001-id942290-sqli',
  'owasp-crs-v030001-id942360-sqli' ]) 
|| 
evaluatePreconfiguredExpr('xss-stable',
  ['owasp-crs-v030001-id941150-xss',
  'owasp-crs-v030001-id941320-xss',
  'owasp-crs-v030001-id941330-xss',
  'owasp-crs-v030001-id941340-xss'])

Facebook 討論區載入中...

步驟