diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml index e14a864a7..77aefba5c 100644 --- a/.github/ISSUE_TEMPLATE/bug_report.yml +++ b/.github/ISSUE_TEMPLATE/bug_report.yml @@ -47,7 +47,7 @@ body: label: BunkerWeb version description: What version of BunkerWeb are you running? placeholder: Version - value: 1.6.2-rc7 + value: 1.6.2 validations: required: true - type: dropdown diff --git a/README.md b/README.md index 41b07d314..da6e9f8ef 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,5 @@

- BunkerWeb logo + BunkerWeb logo

@@ -28,13 +28,11 @@ | πŸ“± Demo UI | - πŸ›‘οΈ Examples - | + πŸ›‘οΈ Examples +
πŸ’¬ Chat | πŸ“ Forum -
- βš™οΈ Configurator | πŸ—ΊοΈ Threatmap | @@ -46,14 +44,14 @@ # BunkerWeb

- Overview banner + Overview banner

BunkerWeb is a next-generation, open-source Web Application Firewall (WAF). -Being a full-featured web server (based on [NGINX](https://nginx.org/) under the hood), it will protect your web services to make them "secure by default." BunkerWeb integrates seamlessly into your existing environments ([Linux](https://docs.bunkerweb.io/1.6.2-rc7/integrations/?utm_campaign=self&utm_source=github#linux), [Docker](https://docs.bunkerweb.io/1.6.2-rc7/integrations/?utm_campaign=self&utm_source=github#docker), [Swarm](https://docs.bunkerweb.io/1.6.2-rc7/integrations/?utm_campaign=self&utm_source=github#swarm), [Kubernetes](https://docs.bunkerweb.io/1.6.2-rc7/integrations/?utm_campaign=self&utm_source=github#kubernetes), …) and is fully configurable (don't panic, there is an [awesome web UI](https://docs.bunkerweb.io/1.6.2-rc7/web-ui/?utm_campaign=self&utm_source=github) if you don't like the CLI) to meet your own use cases. In other words, cybersecurity is no longer a hassle. +Being a full-featured web server (based on [NGINX](https://nginx.org/) under the hood), it will protect your web services to make them "secure by default." BunkerWeb integrates seamlessly into your existing environments ([Linux](https://docs.bunkerweb.io/1.6.2/integrations/?utm_campaign=self&utm_source=github#linux), [Docker](https://docs.bunkerweb.io/1.6.2/integrations/?utm_campaign=self&utm_source=github#docker), [Swarm](https://docs.bunkerweb.io/1.6.2/integrations/?utm_campaign=self&utm_source=github#swarm), [Kubernetes](https://docs.bunkerweb.io/1.6.2/integrations/?utm_campaign=self&utm_source=github#kubernetes), …) as a reverse proxy and is fully configurable (don't panic, there is an [awesome web UI](https://docs.bunkerweb.io/1.6.2/web-ui/?utm_campaign=self&utm_source=github) if you don't like the CLI) to meet your own use cases. In other words, cybersecurity is no longer a hassle. -BunkerWeb contains primary [security features](https://docs.bunkerweb.io/1.6.2-rc7/advanced/?utm_campaign=self&utm_source=github#security-tuning) as part of the core but can be easily extended with additional ones thanks to a [plugin system](https://docs.bunkerweb.io/1.6.2-rc7/plugins/?utm_campaign=self&utm_source=github). +BunkerWeb contains primary [security features](https://docs.bunkerweb.io/1.6.2/advanced/?utm_campaign=self&utm_source=github#security-tuning) as part of the core but can be easily extended with additional ones thanks to a [plugin system](https://docs.bunkerweb.io/1.6.2/plugins/?utm_campaign=self&utm_source=github). ## Why BunkerWeb? @@ -80,7 +78,7 @@ A non-exhaustive list of security features: - **Block known bad IPs** with external blacklists and DNSBL - And much more... -Learn more about the core security features in the [security tuning](https://docs.bunkerweb.io/1.6.2-rc7/advanced/?utm_campaign=self&utm_source=github#security-tuning) section of the documentation. +Learn more about the core security features in the [security tuning](https://docs.bunkerweb.io/1.6.2/advanced/?utm_campaign=self&utm_source=github#security-tuning) section of the documentation. ## Demo @@ -96,32 +94,32 @@ BunkerWeb offers an optional [user interface](web-ui.md) to manage your instance ## BunkerWeb Cloud -Don't want to self-host and manage your own BunkerWeb instance(s)? You might be interested in BunkerWeb Cloud, our fully managed SaaS offer for BunkerWeb. +Don't want to self-host and manage your own BunkerWeb instance(s)? You might be interested in BunkerWeb Cloud, our fully managed SaaS offering for BunkerWeb. -### Coming June 2025 +Try our [BunkerWeb Cloud offer](https://panel.bunkerweb.io/contact.php?utm_campaign=self&utm_source=doc) and get access to: - -You'll be able to get access to : -- Fully managed BunkerWeb instance hosted in our cloud +- A fully managed BunkerWeb instance hosted in our cloud - All BunkerWeb features, including PRO ones -- Monitoring platform, including dashboards and alerts -- Technical support to assist you in the configuration +- A monitoring platform with dashboards and alerts +- Technical support to assist you with configuration - +If you are interested in the BunkerWeb Cloud offering, don't hesitate to [contact us](https://panel.bunkerweb.io/contact.php?utm_campaign=self&utm_source=doc) so we can discuss your needs. ## PRO version +Want to quickly test BunkerWeb PRO for one month? Use the code `freetrial` when placing your order on the [BunkerWeb panel](https://panel.bunkerweb.io/store/bunkerweb-pro?utm_campaign=self&utm_source=doc) or by clicking [here](https://panel.bunkerweb.io/cart.php?a=add&pid=19&promocode=freetrial&utm_campaign=self&utm_source=doc) to directly to apply the promo code (will be effective at checkout). + When using BunkerWeb, you have the choice of the version you want to use: open-source or PRO. -Whether it's enhanced security, an enriched user experience, or technical supervision, the BunkerWeb PRO version will allow you to fully benefit from BunkerWeb and respond to your professional needs. +Whether it's enhanced security, an enriched user experience, or technical monitoring, the BunkerWeb PRO version allows you to fully benefit from BunkerWeb and meet your professional needs. -Be it in the documentation or the user interface, the PRO features are annotated with a crown crown pro icon to distinguish them from those integrated into the open-source version. +In the documentation or the user interface, PRO features are annotated with a crown crown pro icon to distinguish them from those integrated into the open-source version. -You can upgrade from the open-source version to the PRO one easily and at any time you want. The process is pretty straightforward: +You can upgrade from the open-source version to the PRO one easily and at any time. The process is straightforward: -- Claim your [free trial on the BunkerWeb panel](https://panel.bunkerweb.io/?utm_campaign=self&utm_source=doc) +- Claim your [free trial on the BunkerWeb panel](https://panel.bunkerweb.io/store/bunkerweb-pro?utm_campaign=self&utm_source=doc) by using the `freetrial` promo code at checkout - Once connected to the client area, copy your PRO license key -- Paste your private key into BunkerWeb using the [web UI](https://docs.bunkerweb.io/1.6.2-rc7/web-ui/#upgrade-to-pro) or a [specific setting](https://docs.bunkerweb.io/1.6.2-rc7/features/#pro) +- Paste your license key into BunkerWeb using the [web UI](https://docs.bunkerweb.io/1.6.2/web-ui/#upgrade-to-pro) or a [specific setting](https://docs.bunkerweb.io/1.6.2/features/#pro) Do not hesitate to visit the [BunkerWeb panel](https://panel.bunkerweb.io/knowledgebase?utm_campaign=self&utm_source=doc) or [contact us](https://panel.bunkerweb.io/contact.php?utm_campaign=self&utm_source=doc) if you have any questions regarding the PRO version. @@ -142,7 +140,6 @@ Official websites, tools, and resources about BunkerWeb: - [**Documentation**](https://docs.bunkerweb.io): technical documentation of the BunkerWeb solution - [**Demo**](https://demo.bunkerweb.io/?utm_campaign=self&utm_source=doc): demonstration website of BunkerWeb, don't hesitate to attempt attacks to test the robustness of the solution - [**Web UI**](https://demo-ui.bunkerweb.io/?utm_campaign=self&utm_source=doc): online read-only demo of the web UI of BunkerWeb -- [**Configurator**](https://config.bunkerweb.io/?utm_campaign=self&utm_source=doc): user-friendly tool to help you configure BunkerWeb - [**Threatmap**](https://threatmap.bunkerweb.io/?utm_campaign=self&utm_source=doc): live cyber attack blocked by BunkerWeb instances all around the world Community and social networks: @@ -155,10 +152,10 @@ Community and social networks: # Concepts

- Concepts banner + Concepts banner

-You will find more information about the key concepts of BunkerWeb in the [documentation](https://docs.bunkerweb.io/1.6.2-rc7/concepts/?utm_campaign=self&utm_source=github). +You will find more information about the key concepts of BunkerWeb in the [documentation](https://docs.bunkerweb.io/1.6.2/concepts/?utm_campaign=self&utm_source=github). ## Integrations @@ -166,12 +163,12 @@ The first concept is the integration of BunkerWeb into the target environment. W The following integrations are officially supported: -- [Docker](https://docs.bunkerweb.io/1.6.2-rc7/integrations/?utm_campaign=self&utm_source=github#docker) -- [Linux](https://docs.bunkerweb.io/1.6.2-rc7/integrations/?utm_campaign=self&utm_source=github#linux) -- [Docker autoconf](https://docs.bunkerweb.io/1.6.2-rc7/integrations/?utm_campaign=self&utm_source=github#docker-autoconf) -- [Kubernetes](https://docs.bunkerweb.io/1.6.2-rc7/integrations/?utm_campaign=self&utm_source=github#kubernetes) -- [Swarm](https://docs.bunkerweb.io/1.6.2-rc7/integrations/?utm_campaign=self&utm_source=github#swarm) -- [Microsoft Azure](https://docs.bunkerweb.io/1.6.2-rc7/integrations/?utm_campaign=self&utm_source=github#microsoft-azure) +- [Docker](https://docs.bunkerweb.io/1.6.2/integrations/?utm_campaign=self&utm_source=github#docker) +- [Linux](https://docs.bunkerweb.io/1.6.2/integrations/?utm_campaign=self&utm_source=github#linux) +- [Docker autoconf](https://docs.bunkerweb.io/1.6.2/integrations/?utm_campaign=self&utm_source=github#docker-autoconf) +- [Kubernetes](https://docs.bunkerweb.io/1.6.2/integrations/?utm_campaign=self&utm_source=github#kubernetes) +- [Swarm](https://docs.bunkerweb.io/1.6.2/integrations/?utm_campaign=self&utm_source=github#swarm) +- [Microsoft Azure](https://docs.bunkerweb.io/1.6.2/integrations/?utm_campaign=self&utm_source=github#microsoft-azure) ## Settings @@ -191,8 +188,6 @@ USE_GZIP=yes USE_BROTLI=no ``` -You will find an easy-to-use settings generator at [config.bunkerweb.io](https://config.bunkerweb.io/?utm_campaign=self&utm_source=github). - ## Multisite mode The multisite mode is a crucial concept to understand when using BunkerWeb. Because the goal is to protect web applications, we intrinsically inherit the concept of "virtual host" or "vhost" (more info [here](https://en.wikipedia.org/wiki/Virtual_hosting)) which makes it possible to serve multiple web applications from a single (or a cluster of) instance. @@ -203,7 +198,7 @@ When multisite mode is enabled, BunkerWeb will serve and protect multiple web ap ## Custom configurations -Because meeting all the use cases only using the settings is not an option (even with [external plugins](https://docs.bunkerweb.io/1.6.2-rc7/plugins/?utm_campaign=self&utm_source=github)), you can use custom configurations to solve your specific challenges. +Because meeting all the use cases only using the settings is not an option (even with [external plugins](https://docs.bunkerweb.io/1.6.2/plugins/?utm_campaign=self&utm_source=github)), you can use custom configurations to solve your specific challenges. Under the hood, BunkerWeb uses the notorious NGINX web server, that's why you can leverage its configuration system for your specific needs. Custom NGINX configurations can be included in different [contexts](https://docs.nginx.com/nginx/admin-guide/basic-functionality/managing-configuration-files/#contexts) like HTTP or server (all servers and/or specific server block). @@ -212,7 +207,7 @@ Another core component of BunkerWeb is the ModSecurity Web Application Firewall: ## Database

- Database model + Database model

The state of the current configuration of BunkerWeb is stored in a backend database which contains the following data: @@ -241,7 +236,7 @@ In other words, the scheduler is the brain of BunkerWeb.