As far as I know Cloudflare is using too.

Reverse proxy: As we said in the beginning of the module, a WAF can be used as a reverse proxy, because it sits in front of the server and filters all the incoming traffic, which is the opposite from a proxy.

To install mod_rpaf, follow these instructions: apache mod_rpaf installation. WAFs may come in the form of an appliance, server plugin, or filter, and may be customized to an application. W Here are a few frequently asked questions about reverse proxy servers: Reverse Proxy Server vs Proxy Server Lately, however, we've realized that some people actually think we're talking about forward proxy servers or that the two are one and the same.

An example would be something like a WAF sandwich architecture in that your Web Application Firewall/API Gateway is sandwiched by reverse proxy tiers, one for the WAF itself and the other for the individual microservices it talks to. As a reverse proxy, the Barracuda Web Application Firewall protects all your application's custom code, but it also does lot of other things under the hood, that protects third party software such as application frameworks, middleware, protocols, OS stacks, CMS, etc. The key use case scenario here is that you want to do some web server specific task WITHOUT TOUCHING or MODIFYING your existing web server or application – and without letting clients know the proxy exists.

I’ve already described WAF in a previous article, where I spoke about WAF scalability with apache and modsecurity. A host-based application firewall monitors application system calls or other general system communication. Note: The below information is deprecated as HAProxy Enterprise now offers a fully functional native WAF module which supports whitelist-based rulesets, blacklist-based rulesets, and support for ModSecurity rulesets!. A reverse proxy is useful even if you have only one server. Reverse proxy servers and load balancers are components in a client-server computing architecture. It can serve as the front-facing part of your service.

Modsecurity vs naxsi