BunkerWeb Web Application Firewall on Ubuntu 24.04

Overview

BunkerWeb is an open source Web Application Firewall and reverse proxy built on top of nginx. It sits in front of your web applications and APIs and inspects incoming traffic, applying a broad set of security defences out of the box: a ModSecurity engine with the OWASP Core Rule Set, automatic HTTPS, bad behaviour and rate limiting, bot and country filtering, request and header hardening, and optional reputation feeds. Everything is driven by sensible secure defaults, so a site is protected the moment it is placed behind BunkerWeb rather than after a long tuning exercise.

It is managed from a web dashboard where you declare the services you want to protect, point each one at its upstream application, and switch security features on or off per site. Because it is a reverse proxy it protects any HTTP backend regardless of language or framework, which makes it a practical way for teams to add a consistent, auditable layer of web security in front of the apps they already run.

Common uses

• Protect self hosted websites and APIs behind a WAF with the OWASP Core Rule Set and automatic HTTPS
• Add rate limiting, bot filtering and request hardening in front of existing applications without changing them
• Give a small team an auditable, dashboard managed security layer for everything they expose to the internet

See it running

Real screenshots taken while testing this image against its deployment guide.