Core Concepts

As CasWAF's administrator, you should get familiar with at least 2 core concepts: Site, Cert.

Site

In CasWAF, Site is representing the real applications or websites you wish to protect. Each Site is associated with specific domain names or IP addresses, and you can configure multiple Sites according to different needs to ensure comprehensive security protection for all your applications.

The Site class definition is shown as follows:

type Site struct {
    Owner       string `xorm:"varchar(100) notnull pk" json:"owner"`
    Name        string `xorm:"varchar(100) notnull pk" json:"name"`
    CreatedTime string `xorm:"varchar(100)" json:"createdTime"`
    UpdatedTime string `xorm:"varchar(100)" json:"updatedTime"`
    DisplayName string `xorm:"varchar(100)" json:"displayName"`

    Tag          string     `xorm:"varchar(100)" json:"tag"`
    Domain       string     `xorm:"varchar(100)" json:"domain"`
    OtherDomains []string   `xorm:"varchar(500)" json:"otherDomains"`
    NeedRedirect bool       `json:"needRedirect"`
    EnableWaf    bool       `json:"enableWaf"`
    Waf          coraza.WAF `xorm:"-" json:"-"`
    Challenges   []string   `xorm:"mediumtext" json:"challenges"`
    Host         string     `xorm:"varchar(100)" json:"host"`
    Port         int        `json:"port"`
    SslMode      string     `xorm:"varchar(100)" json:"sslMode"`
    SslCert      string     `xorm:"-" json:"sslCert"`
    PublicIp     string     `xorm:"varchar(100)" json:"publicIp"`
    Node         string     `xorm:"varchar(100)" json:"node"`
    IsSelf       bool       `json:"isSelf"`
    Status       string     `xorm:"varchar(100)" json:"status"`
    Nodes        []*Node    `xorm:"mediumtext" json:"nodes"`

    CasdoorApplication string                  `xorm:"varchar(100)" json:"casdoorApplication"`
    ApplicationObj     *casdoorsdk.Application `xorm:"-" json:"applicationObj"`
}

Cert

In CasWAF, Cert is representing the certificates used for HTTPS authentication. By configuring Cert, CasWAF can establish secure encrypted connections between itself and the clients, ensuring the confidentiality and integrity of data and preventing information leakage and tampering attacks.

The Cert class definition is shown as follows:

type Cert struct {
    Owner       string `xorm:"varchar(100) notnull pk" json:"owner"`
    Name        string `xorm:"varchar(100) notnull pk" json:"name"`
    CreatedTime string `xorm:"varchar(100)" json:"createdTime"`
    DisplayName string `xorm:"varchar(100)" json:"displayName"`

    Type            string `xorm:"varchar(100)" json:"type"`
    CryptoAlgorithm string `xorm:"varchar(100)" json:"cryptoAlgorithm"`
    ExpireTime      string `xorm:"varchar(100)" json:"expireTime"`

    Certificate string `xorm:"mediumtext" json:"certificate"`
    PrivateKey  string `xorm:"mediumtext" json:"privateKey"`
}