Latest post
High zero-day in Citrix NetScaler ADC & Gateway: Patch CVE-2026-88779
A high-severity memory overflow vulnerability was disclosed, affecting Citrix NetScaler ADC and Citrix NetScaler Gateway...
Back to all posts
Security
Learn how to strengthen your infrastructure with Web Application Firewalls (WAF) and advanced security features. Perform SSL/TLS offloading and protect against application layer threats to ensure your critical systems are always compliant and protected.
Andrew Howe
Why you shouldn't lose sleep over the commercial end-of-life of ModSecurity
The ModSecurity web application firewall (WAF) engine is set to go end-of-life (EOL) on 1 July 2024...
WAF
Open source
Security
Richard Halcrow
Centralized management for enhanced security with the ADC Portal
You need a clear, comprehensive view of your entire load balancing estate to maintain control and security...
Security
Automation
Application Management
Andrew Howe
Three scenarios for implementing time-based security and content switching on your load balancer
It can sometimes be useful to make load balancing decisions based on the time and date. This allows you to conditionally refuse or redirect connections based on the time they're received...
How-tos
Security
Neil Hosking
Should a load balancer be your first line of defense against Denial of Service (DoS) attacks?
There are two schools of thought on this: ‘yes, it should’ and ‘no, it shouldn't’. Let's look at the arguments both for and against...
Security
WAF
Nicholas Turnbull
OWASP doesn't want you to have crAPI security
Here's what we learned from crAPI about API security, and how a Web Application Firewall (WAF) can help you take things one step further...
Security
Application Management
WAF
Dave Saunders
The role of load balancers in zero trust architectures
Getting on board with zero trust is the easy part. Actually applying these principles to your architecture is less black and white...
Security
Andrew Howe
Report back from the OWASP Core Rule Set Community Summit and OWASP Global AppSec 2023: The WAF conundrum
I had the privilege of speaking in Dublin at this year's OWASP Core Rule Set Community Summit before then attending OWASP Global AppSec immediately afterwards...
WAF
Security
Jon Morby
How to create an SSL certificate in Linux
I thought I would try and cover the basics here by explaining how to create an SSL certificate and the various files that you'll end up with...
How-tos
Security
Integrations
Kashim Cooper
Proactive network management for business continuity
We'd all rather prevent a disaster than have to live with the consequences of one...
High Availability
AWS / Azure / GCP
Security
Andrew Howe
Handling large requests with a Web Application Firewall (WAF) while avoiding Denial of Service (DoS) attacks
Sometimes, we need to pass unusually large HTTP requests through our WAF stack...
WAF
Security
How-tos
Daniel Tighe
How to rate limit with HAProxy Stick Tables and the WAF
A while ago I was asked if it would be possible to apply some general rate limiting in HAProxy and the WAF, in order to help prevent DOS-style attacks on a customer's servers...
HAProxy
WAF
How-tos
Lea Friend
What can we learn from the recent F5 security vulnerability?
F5 recently announced a critical security vulnerability, allowing an attacker to bypass its iControl REST authentication, and execute commands such as creating or deleting files and disabling services...
Security
Open source