A new Cloudflare Web Application Firewall (opens in new tab)

(blog.cloudflare.com)

110 pointsmigueldemoura4y ago17 comments

17 comments

The plan is to open source the old WAF code (that I wrote long ago) once the new WAF is fully rolled out.

Sad to see LuaJIT is no longer in use.

LuaJIT was so far ahead of it's time (and still is), it's sad to see the current state of it since Mike Pall has moved on. The learned lesson for me is that, even if you have a vastly superior offering - the success of something is hugely correlated to the community behind it.

fsfod4y ago

Mike Pall is still working on LuaJIT just last week he pushed the first stage of string buffer support sponsored by some network company https://github.com/LuaJIT/LuaJIT/commit/4c6b669c419f313306b9...

1 more reply

exikyut4y ago

Wow. I was imagining the possibilities of being able to share some of the basic techniques behind the system, but being able to have an actual MWE of real racing stripes™ is cooler than I could ever have imagined would be viable. Thanks.

_kyran4y ago

Curious if you have any stories from working on this? I'd love to hear what some of the hardest problems to solve were?

jgrahamc4y ago

You can start here: https://www.youtube.com/watch?v=nlt4XKhucS4

2 more replies

anotherhue4y ago

Do you get to go 'off-call' then?

jgrahamc4y ago

I haven't been on call for that code for a long time. There's a whole team that works on it and has been improving it for quite a few years.

1 more reply

ChrisArchitect4y ago

Recently for a few sites I run I realized I am increasingly verrry dependent or leaning heavily on this Firewall to keep so much Bot and spam traffic off my site.

lovedswain4y ago

Sorry, you don't get to market to folk who're willing to read the words "Magic Quadrant" and post that shit to HN at the same time. Pick your poison! We're a technical crowd, remember? Shudder. I wonder if the CloudFlare folk will be returning to their offices wearing suits when lockdown is over.

j / k navigate · click thread line to collapse

17 comments

jgrahamc4y ago

The plan is to open source the old WAF code (that I wrote long ago) once the new WAF is fully rolled out.

alberth4y ago

Sad to see LuaJIT is no longer in use.

fsfod4y ago

1 more reply

exikyut4y ago

_kyran4y ago

Curious if you have any stories from working on this? I'd love to hear what some of the hardest problems to solve were?

jgrahamc4y ago

You can start here: https://www.youtube.com/watch?v=nlt4XKhucS4

2 more replies

anotherhue4y ago

Do you get to go 'off-call' then?

jgrahamc4y ago

I haven't been on call for that code for a long time. There's a whole team that works on it and has been improving it for quite a few years.

1 more reply

ChrisArchitect4y ago

Recently for a few sites I run I realized I am increasingly verrry dependent or leaning heavily on this Firewall to keep so much Bot and spam traffic off my site.

lovedswain4y ago

j / k navigate · click thread line to collapse