alibabacloud-waf-lua-extension-dev
Installation
SKILL.md
WAF Extension Plugin (Lua) Development & Review
Alibaba Cloud WAF 3.0 "Extension Plugins" allow custom Lua scripts to hook into the request processing pipeline and implement security logic beyond the native rules.
Official documentation: https://help.aliyun.com/zh/waf/web-application-firewall-3-0/user-guide/extensions
This feature is supported only on the subscription Enterprise/Flagship editions and the pay-as-you-go edition, and it is a paid service. After a plugin is created, it takes effect only when it is referenced by a "Custom Rules" protection template.
Key Constraints (Read First)
| Constraint | Impact |
|---|---|
| No OpenAPI / CLI | Extension plugins can only be configured in the console; there is no corresponding aliyun command or SDK interface. Do not try to create/query plugins via CLI, and there is no capability to import local files |
| Block-only action | The "plugin action parameter" in debug testing currently supports only block mode; punish() means blocking the request |
| No logging | print/warn have no effect; there is no log output mechanism inside scripts. The only feedback is the execution-result panel of "Run Debug" in the console |
| Association required to take effect | After a plugin is created, it must be referenced by a "Custom Rules" protection template; the plugin logic executes only when the rule matches |