Skip to content

Implement a SharedMemory mechanism as Collection backend on libmodsecurity #1141

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
zimmerle opened this issue May 5, 2016 · 7 comments
Closed

Comments

@zimmerle
Copy link
Contributor

zimmerle commented May 5, 2016

ModSecurity version 3 architecture allow the utilization of multiple backends, including a shared memory one. The support should be implemented. The interface is available here:

https://github.com/SpiderLabs/ModSecurity/blob/libmodsecurity/headers/modsecurity/collection/collection.h

@zimmerle
Copy link
Contributor Author

zimmerle commented Jul 8, 2016

As of: 833089e collections can be saved using LMDB. LMDB support the access from multiprocess. Further info about LMDB: https://github.com/LMDB/lmdb

@HOSTED-POWER
Copy link

Hi,

How to configure mod_security to use this LMDB? Could someone please post config sample, thanks a lot!

@HOSTED-POWER
Copy link

Any update on how to configure it?

@Roger-Man
Copy link

@HOSTED-POWER
Hi,
If you have lmdb installed, you could enable it by passing --with-lmdb to modsecurity configure script.
Good luck

@HOSTED-POWER
Copy link

Hey Roger-Man,

Thanks a lot for your feedback! Just pass it and it will use it? :)

Any idea about redis by coincidence?

@zimmerle
Copy link
Contributor Author

zimmerle commented Nov 1, 2018

Hi @HOSTED-POWER,

Redis is not yet supported. Check #1139.

@Roger-Man
Copy link

Roger-Man commented Nov 20, 2018

Hi @HOSTED-POWER

Hi just pass it and the configure script uses it. But, Hey just don't pass it. Its so buggy and ends up in nginx worker process to crash and exit. This result in user session termination with empty responses. The logs complain about

double free or corruption

May be thats why no one including @zimmerle answered you how to configure it for a long time. I know he actively replies the posts.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants