Nginx-Native
Nginx-native like its Nginx-lua counterpart, work with the Signal Sciences agent as part of a state-of-the-art Next Generation WAF.
To modify the Signal Sciences module configuration in Nginx-native you will need to add directives to your Nginx-native configuration file (e.g. nginx.conf).
All of the directives we support are set in the http section of the nginx.conf. The exception is sigsci_enabled which can be set in http and per Location.
Directives Supported:
| Directive | Description |
|---|---|
| sigsci_enabled | Enable or disable the module. Default: "on" |
| sigsci_handler_phase | Specifies prerequest handling phase. Choose one of: "access", "preaccess", "precontent", "rewrite". Default is "access". nginx-1.12.2 does not support "precontent" |
| sigsci_agent_max_post_len | Maximum POST body site in bytes. Default: 100000. Max allowed: 2000000 |
| sigsci_agent_timeout | Agent socket timeout (in milli-seconds). Default: 100 |
| sigsci_agent_host | Host or IP Address, otherwise specify the Unix domain socket file: “unix:/var/run/sigsci.sock” |
| sigsci_agent_port | The local port (when using TCP) that the agent listens on. Default: none. Note, if sigsci_agent_port is set then sigsci_agent_host must be an IP or hostname. |
| sigsci_anomaly_resp_size | Detect anomalous size response. Default: 524288 |
| sigsci_anomaly_resp_time | Detect anomalous response time (milli-seconds). Default: 1000 |
| sigsci_debug | Allows the sigsci module to log with out need to turn on debug for all nginx. Default: "off" |