xTag

Overview

Full name
docker.io/owasp/modsecurity-crs
Registry
docker.io
Namespace
owasp
Repository
modsecurity-crs
Cached tags
1126
Last synced
07/05/2026, 05:07 PM

Introduction

OWASP ModSecurity CRS 规则集镜像，配合 Nginx/Apache 实现 WAF 防护，Web 应用 SQLi/XSS 等 OWASP Top 10 攻击拦截。

Details

owasp/modsecurity-crs 打包 ModSecurity 核心规则集（CRS），与反向代理联动检测并阻断常见 Web 攻击。定位为 WAF 规则引擎侧车或集成组件，通常与 nginx/apache 镜像组合；API 网关安全加固、合规 WAF 层或渗透测试后的防护基线部署。

快速启动

docker run -d --name modsecurity-crs \
  -p 8080:8080 \
  docker.io/owasp/modsecurity-crs:nginx

推荐实践

docker run -d --name modsecurity-crs \
  --restart unless-stopped \
  -p 8080:8080 \
  -v /etc/modsecurity/crs-setup.conf:/etc/modsecurity/crs-setup.conf:ro \
  -e PARanoia=2 \
  docker.io/owasp/modsecurity-crs:nginx-4.4.0

核心参数说明

  • PARanoia — 规则严格级别 1-4
  • crs-setup.conf — 自定义规则与例外
  • -p 8080:8080 — 带 WAF 的 HTTP 入口
  • 调优 — 误报需白名单规则

Kubernetes

apiVersion: apps/v1
kind: Deployment
metadata:
  name: modsecurity-crs
spec:
  replicas: 2
  selector:
    matchLabels:
      app: waf
  template:
    metadata:
      labels:
        app: waf
    spec:
      containers:
        - name: waf
          image: docker.io/owasp/modsecurity-crs:nginx-4.4.0
          ports:
            - containerPort: 8080
          volumeMounts:
            - name: crs-config
              mountPath: /etc/modsecurity/crs-setup.conf
              subPath: crs-setup.conf
      volumes:
        - name: crs-config
          configMap:
            name: modsecurity-crs
---
apiVersion: v1
kind: Service
metadata:
  name: modsecurity-crs
spec:
  selector:
    app: waf
  ports:
    - port: 8080
      targetPort: 8080

Ingress 前置 WAF；ConfigMap 管理规则例外。

Latest tags (20)

View all 1126 tags →
TagArchPushed AtSizeDigestSyncWishAction
docker.io/owasp/modsecurity-crs
:4.27.0-nginx-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:47103.7 MBsha256:86fe854ab1e5…
docker.io/owasp/modsecurity-crs
:4.27-nginx-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:47103.7 MBsha256:86fe854ab1e5…
docker.io/owasp/modsecurity-crs
:4-nginx-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:46103.7 MBsha256:86fe854ab1e5…
docker.io/owasp/modsecurity-crs
:nginx
linux/amd64linux/arm64linux/386
2026/06/26 20:46103.7 MBsha256:86fe854ab1e5…
docker.io/owasp/modsecurity-crs
:3.3.9-nginx-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:45103.6 MBsha256:c8a767ee8184…
docker.io/owasp/modsecurity-crs
:3.3-nginx-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:45103.6 MBsha256:c8a767ee8184…
docker.io/owasp/modsecurity-crs
:3-nginx-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:45103.6 MBsha256:c8a767ee8184…
docker.io/owasp/modsecurity-crs
:4.25.0-nginx-lts
linux/amd64linux/arm64linux/386
2026/06/26 20:21103.7 MBsha256:a26ef55bda79…
docker.io/owasp/modsecurity-crs
:4.25-nginx-lts
linux/amd64linux/arm64linux/386
2026/06/26 20:21103.7 MBsha256:a26ef55bda79…
docker.io/owasp/modsecurity-crs
:4.25.0-nginx-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:21103.7 MBsha256:a26ef55bda79…
docker.io/owasp/modsecurity-crs
:4.25-nginx-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:21103.7 MBsha256:a26ef55bda79…
docker.io/owasp/modsecurity-crs
:3.3.9-nginx-alpine-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:1538.6 MBsha256:791837dbdeb9…
docker.io/owasp/modsecurity-crs
:3.3-nginx-alpine-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:1538.6 MBsha256:791837dbdeb9…
docker.io/owasp/modsecurity-crs
:3-nginx-alpine-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:1538.6 MBsha256:791837dbdeb9…
docker.io/owasp/modsecurity-crs
:4.25.0-nginx-alpine-lts
linux/amd64linux/arm64linux/386
2026/06/26 20:1538.7 MBsha256:f809a6eb96b1…
docker.io/owasp/modsecurity-crs
:4.25-nginx-alpine-lts
linux/amd64linux/arm64linux/386
2026/06/26 20:1538.7 MBsha256:f809a6eb96b1…
docker.io/owasp/modsecurity-crs
:4.25.0-nginx-alpine-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:1538.7 MBsha256:f809a6eb96b1…
docker.io/owasp/modsecurity-crs
:4.25-nginx-alpine-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:1538.7 MBsha256:f809a6eb96b1…
docker.io/owasp/modsecurity-crs
:4-nginx-alpine-202606261106
linux/amd64linux/arm64linux/386
2026/06/26 20:1538.7 MBsha256:f809a6eb96b1…
docker.io/owasp/modsecurity-crs
:nginx-alpine
linux/amd64linux/arm64linux/386
2026/06/26 20:1438.6 MBsha256:791837dbdeb9…