TiloBox
Back to directory
BunkerWeb project preview

BunkerWeb

Next-generation open-source Web Application Firewall (WAF) and security gateway.

LicenseAGPL-3.0
GitHub stars6.8k
Last commit1 weeks ago
Tags6 topics
CybersecurityFirewallReverse ProxyDdos ProtectionWafSecurity
Overview

Why consider BunkerWeb?

BunkerWeb is an open-source Web Application Firewall (WAF) and reverse proxy. It shields web services from OWASP Top 10 vulnerabilities, botnets, DDoS attacks, and malicious crawlers.

Guided learning

Learn BunkerWeb by building

Practical setup notes, real use cases, and copy-ready examples in one focused guide.

1 min read 2 sections
In this guide2 sections

Overview of BunkerWeb

BunkerWeb integrates with Docker, Kubernetes, and Linux to provide out-of-the-box HTTPS encryption, ModSecurity rules, Coraza integration, bad bot detection, and rate limiting.

Docker Compose Quickstart

yaml
1services:
2 bunkerweb:
3 image: bunkerity/bunkerweb:1.5.8
4 ports:
5 - 80:8080
6 - 443:8443
7 environment:
8 - SERVER_NAME=example.com
9 - SERVE_FILES=no
10 - REVERSE_PROXY_URL=/
11 - REVERSE_PROXY_HOST=http://backend:80

BunkerWeb is distributed under the GNU AGPL-3.0 license.

Related tools

More options with a similar category or technology profile.

BunkerWeb FAQs

BunkerWeb is listed as a Devops Infrastructure tool on TiloBox. Review the overview, features, and official documentation on this page to decide whether it solves your specific workflow.

Start with the project's GitHub repository and official website for supported installation and deployment instructions. Test the setup with representative data or a small project before rolling it out more widely.

BunkerWeb is listed under the AGPL-3.0 license. Read the complete license text and the project's notices before using, modifying, or distributing the software.

Production readiness depends on your requirements. Review maintenance activity, security practices, documentation, backup and upgrade procedures, and compatibility with your stack; then validate it in a non-production environment.

BunkerWeb is listed as an alternative to AWS WAF. Compare the core workflow, deployment model, integrations, and licensing against your must-have requirements before switching.