Provide application firewall security in Auto DevOps

Auto DevOps allows you to deploy your web application to a Kubernetes cluster. It also runs security checks (static and dynamic) to find possible vulnerabilities. But once deployed, the application can be attacked by everyone.

Including an application firewall, built-in in the deployment, will help in mitigating the risk of a break-in.

A possible option is to use ModSecurity support in nginx-ingress: https://github.com/kubernetes/ingress-nginx/blob/master/docs/user-guide/modsecurity.md.

Edited Feb 01, 2018 by Fabio Busatto
Assignee Loading
Time tracking Loading