16-Phase Request Pipeline
Full request lifecycle processing from connection to logging, with early exit on block.
OpenPRX
PRX-WAF
High-performance Web Application Firewall
Production-grade WAF built on Cloudflare's Pingora proxy framework.
Language: Rust License: Apache-2.0 
Key Features
644+ Built-in Rules
OWASP CRS, custom YAML rules, ModSecurity compatibility, and JSON rule format.
GeoIP with ip2region
Country and region-level blocking and rate limiting with offline ip2region database.
Bot Detection
User-agent analysis, behavioral scoring, and crawler classification.
Advanced Rate Limiting
Per-IP, per-route, and per-API-key rate limiting with sliding window counters.
API Security
JSON body inspection, parameter validation, and API-specific rule profiles.
Architecture
Client
→ Pingora Proxy
→ Backend Server
↕ WAF Engine (644+ Rules)
OWASP CRS | GeoIP | Bot | Rate Limit | API
Tech Stack
Rust, Pingora, PostgreSQL, Vue 3
Quick Start
git clone https://github.com/openprx/prx-waf.git
cd prx-waf
docker compose up -dAlso from OpenPRX
OpenPR
Project management where the team decides together
Plan work, track issues, and make decisions with built-in proposals, voting, and trust scores.
Team Governance Sprint Planning AI Integration Proposals & Voting
Learn More PRX
An AI assistant that gets smarter over time
Connect to any chat platform, pick the best AI model automatically, and evolve its own strategies.
Multi-Platform Self-Evolving Any AI Model Extensible
Learn More PRX-Memory
Long-term memory for your AI tools
Your AI coding tools remember what they learned — across sessions, projects, and teams.
Persistent Memory Local-First Works with Any AI Smart Recall
Learn More PRX-SD
Open-source antivirus for servers and desktops
Scan files, detect malware, and quarantine threats — with community-shared threat intelligence.
Malware Detection Real-time Monitor Auto Quarantine Cross-Platform
Learn More Fenfa
Distribute apps to every device
Upload once, deliver to iOS, Android, and desktop — with OTA updates and download pages.
All Platforms OTA Updates Self-Hosted CI/CD Ready
Learn More