What it does
BunkerWeb is an open-source reverse-proxy WAF for web services with HTTP policy and certificate-management features.
BunkerWeb combines a web entry point with WAF controls. It runs as a reverse proxy and offers Linux, Docker and Kubernetes integration paths, with HTTPS-certificate and HTTP-policy management in the same gateway. Map the upstream services and certificate ownership before placing it in the request path. Include legitimate uploads, integrations and a recovery route in the evaluation. Its core is distributed under AGPLv3, so deployment and redistribution obligations belong in the implementation review.
Strengths
- Reverse proxy and WAF administration in one deployment
Best for
- Operators planning a protected entry point for web services
Sources
- BunkerWeb - The open-source Web Application Firewall (WAF) (Oct 26, 2026)