Observed arrival · 2026-08-28
Enkidux, the WAF that shows its work
A HAProxy-native web application firewall that evaluates requests through ten switchable inspection layers before allowing, monitoring, or blocking them.
Field notes
The system places ten independently controlled checks in an ordered request path, with monitor mode recording findings and continuing evaluation as though no block had occurred. The documented layers include local GeoIP checks, per-path rate limits, forward-confirmed reverse DNS for crawler verification, and parsed SQL injection detection. The page states that blocked requests receive a 403 from HAProxy before reaching the application, while verdicts return over SPOE without an extra proxy hop or TLS termination.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue