Open source WAF firewall "Janusec Application Gateway" construction
0x01 introduces Janusec Application Gateway
Janusec Application Gateway, an application security solution, provides WAF (Web Application Firewall), unified Web management portal, private key protection, Web routing and scalable load balancing. With Janusec, you can build secure and scalable applications.
Main features
WAF (Web Application Firewall), block SQL injection, cross-site scripting, sensitive data disclosure, CC***, etc.
Group policy (working with multiple check points)
CAPTCHA support
Unified Web Management
HTTPS support, no agent required.
Using private key encrypted storage for certificate protection
Scalable architecture, load balancing and multi-node support
Introduction of 0x02 environment and installation preparation
1 system requirements:
Node operating system database master node CentOS/RHEL 7, or Debian 9, x86_64PostgreSQL 9.39.49.59.610
2. Installation preparation
2.1system: Centos 7 x86 minimum installation
2.2 Update # yum update
2.3 install the PostgreSQL database
2.3.1 add PostgreSQL database source, yum installation
# yum install https://download.postgresql.org/pub/repos/yum/10/redhat/rhel-7-x86_64/pgdg-centos10-10-2.noarch.rpm
# yum install postgresql10-server
# / usr/pgsql-10/bin/postgresql-10-setup initdb
# systemctl restart postgresql-10.service
# su-postgres
-bash-4.2$ psql # enter the console to create users and libraries
Postgres=# create user janusec with password 'abc789@.com'
Postgres=# create database janusec owner janusec
Postgres=# grant all privileges on database janusec to janusec
Postgres=#\ Q
Exit
2.3.2 modify PostgreSQL authentication method
# vi / var/lib/pgsql/10/data/pg_hba.conf
Modify this line in pg_hba.conf:
Host all all 127.0.0.1/32 md5
# systemctl restart postgresql-10.service # restart the PostgreSQL service
# systemctl enable postgresql-10.service # add startup service
0x03 Janusec installation
3.1 download the installation package
# cd~
# wget https://www.janusec.com/download/janusec-latest.tar.gz
# tar zxf. / janusec-latest.tar.gz
3.2 installation (note that ROOT permission is required)
The path after installation is: / usr/local/janusec/
# cd janusec-0.9.3
#. / install.sh
Select 1. Master Node
3.3 modify database connection configuration
# vi / usr/local/janusec/config.json
# systemctl start janusec.service # start the WAF service
# systemctl enable janusec.service # add startup service
0x04 Janusec test
Open a Web browser, such as Chrome access
Http:// your_master_ip_address:9080 /
Log in to J@nusec123 with the default username admin and password
Note: you can turn off Centos Firewall during testing.
Refer to the official document: https://www.janusec.com/documentation
Project github address: https://github.com/Janusec/janusec
Repost please indicate that it is transferred from: https://www.security-360.cn/
