-
Notifications
You must be signed in to change notification settings - Fork 599
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[建议] 希望nginx集成ja3指纹 #852
Labels
enhancement
New feature or request
Comments
能具体分享下, waf 上识别 ja3 指纹,对防护或者业务有啥好处么 |
把你比作攻击者,你的指纹是你的身份标识,不管你怎么换IP,你还是你。 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
背景与遇到的问题
希望集成ja3指纹,并透传到源站服务器,同时延伸出针对IP指纹的拦截(包括扩展实现类似现有的基于IP组的黑白名单库)。针对代理拨号、更换IP等方式的扫描、攻击等进行指纹识别。
建议的解决方案
nginx集成ja3指纹,获取的指纹通过header透传到下游服务器。"通用配置"中添加指纹库,"防护配置" --> "黑白名单"中支持添加指纹库
The text was updated successfully, but these errors were encountered: