Next-Gen Firewalls & WAF Shielding

Distributed L7 Reverse-Proxy with In-Memory Botnet Scrubbing

Multi-terabit volumetric DDoS mitigation paired with real-time heuristic Layer 7 web application firewalls deployed across Irish and EU edge nodes. Traffic is scrubbed without storing unencrypted client payloads.

Hardened Dublin Perimeter Nginx / Envoy Config

# /etc/luar/waf-perimeter.conf
# Luar IT Managed WAF & L7 Shielding (Dublin Node)

upstream backend_cluster {
    server 10.240.0.12:8443 max_fails=2 fail_timeout=10s;
    keepalive 64;
}

server {
    listen 443 ssl http2 reuseport;
    server_name firewalls-waf.luarit.com client-app.eu;

    # TLS 1.3 Strict Ciphers
    ssl_protocols TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256';

    # Security Headers
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
    add_header X-Frame-Options "DENY" always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header Content-Security-Policy "default-src 'self'; frame-ancestors 'none';" always;

    # Rate Limiting & Bot Scrubbing
    limit_req zone=luar_edge_zone burst=30 nodelay;
    client_max_body_size 16M;

    location / {
        proxy_pass https://backend_cluster;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Luar-Inspection-ID $request_id;
    }
}