Kubernetes WAF by Prophaze is a Kubernetes Native Web Application Firewall (WAF) that intelligently tracks down malicious requests into your Web APIs. It is installed by embedding Prophaze Kubernetes WAF into your current ingress controller. Prophaze supports all the versions of Nginx ingress controller, Kubernetes ingress controller, or services meshes like istio or traefik

Native Kubernetes WAF

Prophaze Helm Chart installation can replace your existing ingress controller with a Prophaze custom ingress controller in zero downtime. Prophaze is deployed in line with your Cloud load balancer as a Kubernetes microservice to inspect packets at the ingress level towards API services.

Conversely, a Prophaze Kubernetes cluster can be deployed in the same zone as your cloud instance provided that you want to keep your existing ingress controller. In this case, Prophaze acts as a reverse proxy deployed at the DNS level which monitors API requests before reaching the Kubernetes cluster. This is different from conventional DNS Based WAF in the sense that technically the WAF is deployed on-premise in your cloud data center. The WAF is deployed in your same hence latency is negligible.