Community Free

WAFX Download & Installation

Try the Community Edition with up to 3 Hosts—no license required (features are limited).

Supported OS: Debian 13 / Ubuntu
Other OS Coming Soon
Release v1.0.2 Highlights

Cloud-Level Monitoring

New Industry Standard

Full-stack observability for your security infrastructure. Track system resources, network throughput, and disk I/O with high-fidelity ApexCharts visualizations.

RPS Tracking
Live Connections
Memory Profiling

WP Logic Pack

Native WordPress hardening with optimized proxy-pass configurations and dedicated UI support.

CMS Optimized

Client IP Extraction

Advanced origin detection behind any CDN or Load Balancer.

v1.0.2 Core Deployments
+ Integrated radial charts for RAM/Swap usage
+ Nginx status: workers, version, connections
+ Metric cards for RPS and concurrent reqs
~ Responsive layouts for all system dashboards
~ Enhanced OS icons for Linux and FreeBSD
~ Added Sidebar navigation for Server pages

1 Download Packages

Latest
WAFX Dashboard
.deb Package (v1.0.2)
Control Plane
Latest
NGINX WAFX Engine
.deb Package (v1.29.6-wafx-0.2)
High Performance
WAFX Engine (Legacy)
.deb Package (v1.29.5)
Stable Build

Package Info

Maintainer WafX Team <dionipe@indobsd.id>
Homepage wafx.indobsd.id
License Custom (Community Edition)
Build Specifications

Nginx 1.29.6 rebuilt from source with Coraza WAF, JA3 fingerprinting, and OpenSSL 3.4.1 (WafX-0.2).

Module Capabilities

WAF Engine Coraza (OWASP CRS 4.x)
TLS Fingerprint JA3/JA4 Detection
SSL Stack OpenSSL 3.4.1 (Patched)
Net Stack HTTP/2 & HTTP/3 (QUIC)
Core Modules GeoIP, Stream, Image
Conflict Note Replaces standard nginx

What's New in v1.0.2

Server & Nginx Monitoring

Real-time monitoring for system resources, network, and disk I/O. Dedicated Nginx performance metrics with live RPS and connection tracking using ApexCharts.

WordPress Logic Pack

Native WordPress security enhancements with proxy-pass optimized configurations and dedicated UI support for better hardening.

Real Client IP Extraction

Advanced extraction configuration for accurate origin IP detection behind proxies, CDNs, and load balancers.

OS-Specific Optimizations

Improved system resource readings for Linux and FreeBSD with dynamic OS icon displays in the dashboard.

Detailed Changelog v1.0.2
  • Update security headers description and improve placeholder for Content-Security-Policy
  • Integrated radial charts for RAM/Swap usage
  • Added network and disk I/O telemetry cards
  • Nginx status bar: workers, versions, connections
  • Metric cards for max RPS and concurrent reqs
  • Responsive design adjustments for all dashboards
  • Sidebar navigation links for Nginx/Server pages

2 Installation Guide (Root)

Add Repository & Dependencies

# Add deb-multimedia repository
echo "deb http://www.deb-multimedia.org trixie main" >> /etc/apt/sources.list

# Update package index (ignore errors/warnings here)
apt-get update -oAcquire::AllowInsecureRepositories=true

# Install GPG key
apt-get install deb-multimedia-keyring

# Install required libraries
apt-get install -y --allow-unauthenticated \
libpcre3-dev libxml2-dev libxslt1-dev libgd-dev \
libgeoip-dev libpcre2-dev libssl-dev zlib1g-dev

Alternatively, download packages via CLI

wget https://wafx.indobsd.id/download/wafx-dashboard_1.0.2-1_amd64.deb
wget https://wafx.indobsd.id/download/nginx-wafx_1.29.6-wafx-0.2_amd64.deb

Install Packages

dpkg -i nginx-wafx_1.29.6-wafx-0.2_amd64.deb
dpkg -i wafx-dashboard_1.0.2-1_amd64.deb

Verify Service Startup Status

# Check if services are active
systemctl is-active wafx-dashboard.service
systemctl is-active nginx.service

# View detailed service status
systemctl status nginx
systemctl status wafx-dashboard

Access the Dashboard

Open your web browser and navigate to your server's IP address on port 8080.

URL Example
http://192.168.250.10:8080/
Default Credentials
User: admin
Password: wafx2025

Troubleshooting

If NGINX is not running properly or the module is not detected, please download the libcoraza.so file and run the following commands as root:

Download libcoraza.so
Shared Object Library
# Place the library and reload
mv libcoraza.so /usr/local/lib/
echo "/usr/local/lib" >> /etc/ld.so.conf.d/coraza.conf
ldconfig