Multiple domains - backend about coraza-spoa

[zc-devs]

If you process only requests, then it's easy:

# /etc/haproxy/coraza.conf
spoe-message coraza-req
    args app=req.hdr(host) id=unique-id ...

# /etc/coraza-spoa/spoa.yaml
applications:
  dom1.example.com:
    rules:
      ...
  dom2.example.com:
    rules:
      ...

If you would like to process responses as well, then you have to save host in transaction variable:

# /etc/haproxy/haproxy.cfg
frontend https_front
    ...
    http-request   set-var(txn.app_name) req.hdr(host)
    ...

and use it in response processing:

# /etc/haproxy/coraza.conf
spoe-message coraza-res
    args app=var(txn.app_name) id=unique-id ...

[thelogh]

Thanks, everything works fine

[thelogh]

If it's helpful, I've written a short guide https://www.alldiscoveries.com/multidomain-installation-and-configuration-of-haproxy-with-waf-coraza-spoa-and-owasp-modsecurity-core-rule-set-4-0-wordpress-rule-exclusions-on-ubuntu-server-22-04-lts/