This is an old revision of the document!
Web Application Firewall
LiteSpeed Web Server offers excellent ModSecurity compatibility, allowing sophisticated rules for filtering out attacking requests by checking for known attack signatures. LSWS has built-in WAF security features to block bad connections. LiteSpeed also works well with popular mod_security rules set such as Owasp, Atomicorp, Comodo and CloudLinux Imunify360.
LSWS's built-in security features
| Mitigating HTTP-level DDoS Attacks | How to mitigate DDoS attacks with LSWS's security features |
| Understanding LiteSpeed Advanced Anti-DDos Setup Service | Fine tune anti-DDoS configurations and set up a script using iptables to automatically block attacking IPs detected by web server. |
LSWS works well with common WAF Mod_security rule sets
LSWS support most of the mod_security rules commonly used, such as Owasp, Atomicorp, Comodo and CloudLinux Imunify360. Since Apache and LiteSpeed may have different rules set, please make sure to download the right rules set with the right web server. The following will explain the detailed steps on how to configure rules set to use with LSWS.
LSWS with control panel
LSWS with cpanel
| Install and configure Comodo WAF to use with LiteSpeed on a cPanel server | How to install and configure Comodo mod_security rules to work with LiteSpeed on cPanel |
LSWS without control panel
| Install and configure Comodo WAF to use with Standalone LiteSpeed Web Server | How to install and configure Comodo mod_security rules to work with Standalone LiteSpeed Web Server |
| Use OWASP mod security rule set with LSWS | How to use OWASP mod_security rules with LiteSpeed Web Server |
| Use Atomicorp WAF with LSWS | How to use Atomicorp mod_security rules with LiteSpeed Web Server |
Mod Security compatibility
| LSWS compatible with most common mod_security rules | Mod Security compatibility |