mirror of
https://github.com/ADD-SP/ngx_waf.git
synced 2026-04-26 14:05:52 +03:00
[GH-ISSUE #82] 开启 ModSecurity后性能影响的问题有什么好方案解决吗？ 除了这里的静态配置https://docs.addesp.com/ngx_waf/zh-cn/practice/enable-modsecurity.html #195
Labels
No labels
MacOS
Nginx
OpenResty
Tengine
bug
documentation
enhancement
needs-investigation
pull-request
question
stale
stale
stale
timeout
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/ngx_waf#195
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @smallhorsegg on GitHub (Jan 7, 2022).
Original GitHub issue: https://github.com/ADD-SP/ngx_waf/issues/82
@ADD-SP commented on GitHub (Jan 7, 2022):
没有，因为 ModSecurity 的规则十分复杂，又涉及到硬盘和网络 I/O，缓存也不适用。
@ADD-SP commented on GitHub (Jan 7, 2022):
可能最好的办法就是优化 ModSecurity 引擎本身。
@ADD-SP commented on GitHub (Jan 7, 2022):
详情可以看看 https://github.com/ADD-SP/ngx_waf/issues/73#issuecomment-990742022 。
@smallhorsegg commented on GitHub (Jan 7, 2022):
开启后发现cpu使用率飙升，而且磁盘io也非常高
@ADD-SP commented on GitHub (Jan 7, 2022):
硬盘 I/O 很高可以通过关闭审计日志解决。CPU 高很头疼，之前已经尝试过许多优化方法了，没有发现适用的。
@smallhorsegg commented on GitHub (Jan 7, 2022):
okok thx