bnkty

Custom nginx configs are supported (more info here : https://docs.bunkerweb.io/latest/advanced/#custom-configurat...) but BunkerWeb also includes its own list of settings.

Caddy does not offer full application protection besides HTTPS and basic stuff.

Features with a crown icon are PRO, you will find full list of free and PRO features here : https://docs.bunkerweb.io/latest/features/

Thanks for the kind words!

Kubernetes integration is really awesome, you can use BunkerWeb ingress controller or mix it with an existing ingress controller.

ModSecurity doesn't offer antibot, bad behavior, certificate management, ... You can find the full list of features here : https://docs.bunkerweb.io/latest/features/

You will need to migrate to BunkerWeb. But since BunkerWeb is based on NGINX it might be easier than you think. As an example, it supports custom NGINX configs : https://docs.bunkerweb.io/latest/quickstart-guide/#custom-co...

Maybe you can join our Discord to discuss further about your use case.

You are right, this is an open-core model. The PRO features are proprietary and, to be precise, they are actually modules that integrate into the core of the solution. In addition to these features, the PRO version gives you access to technical support. We completely agree with you that BunkerWeb can be used by everyone to make the web more secure. We sincerely believe that the features offered in the community version contribute significantly to this goal. Thank you for your feedback.

Performance will indeed decrease compared to a web server without security features. However, this largely depends on the BunkerWeb features you choose to enable.

Indeed, we use NGINX as the base web server. NGINX + LUA to be precise.

Not at the moment but we plan to work on it. Thanks for your feedback.

The BunkerNet feature is completely optional. You can disable it at any time, however, you will not be able to take advantage of crowdsourcing on threats if you do so. More information here : https://docs.bunkerweb.io/latest/security-tuning/#bunkernet

Yes you can configure your own CSP, more info here : https://docs.bunkerweb.io/latest/security-tuning/#security-h...

Please note that we plan to improve it in the future with automation.

You can use BunkerWeb to protect your own SaaS against malicious actors.

That's awesome, thanks for sharing. We will have a look at it for sure.

(BW maintainers here)

Thanks for sharing BW on HN !

(BW maintainers here)

We try our best to fix critical bugs and enhance the user experience. I can tell you that BW is running in production for both homelabs and enterprise.

(BW maintainers here)

ModSecurity is just one security feature included into BW, you can find the full list here : https://docs.bunkerweb.io/latest/security-tuning/

Btw we also have plugins (e.g. coraza) as described here : https://docs.bunkerweb.io/latest/plugins/