Blog
Notes from the project: why it is built the way it is, how the detection is tested, and what we learn along the way.
- Light WAF: following one request through a WAF written in Rust
What Light WAF is and why it exists, then a walk through the code path of one malicious request: client-IP resolution, fixed-point decoding, a sound RegexSet prefilter, cumulative scoring, panic isolation and hot reload — plus the numbers and the limits.