Skip to content

ModSecurity version 3 (earlier release candidate 1)

Jump to bottom
Felipe Zimmerle edited this page Aug 3, 2016 · 1 revision

What is the version 3 earlier release candidate

ModSecurity version 3 (earlier-rc1) was not released yet. This wikipage highlights the most important differences between ModSecurity version 2 and v3-erc1 (earlier release candidate 1) [to be released].

The earlier release candidate of ModSecurity version 3 does not target all the features from version 2. Instead, it is targeting to fully support the "OWASP Core Rules Set version 3". Some of the missing pieces have a very low audience, and they will be target in the upcoming releases candidates. The missing pieces are listed in this wikipage.

Collections update interval.

ModSecurity's persistent collections are saved per thread (or process). From time to time the different values from each thread (or process) are merged into a global storage. A simple counter (for instance: IP:counter) will have different values for the different web server "workers", depending on the process that answers the request. That behavior happens in both versions of ModSecurity (2 and 3). But, the time that is expected to merge the collections is higher in ModSecurity version 2. In practical aspect it means that in ModSecurity version 3 the values for the threads should me more precise.

Another important point to notice is the fact that ModSecurity version 3 does not expire the values for the collections. The collection was built to be very small, thus no need to expire. The expiration maybe taken in care by the backend, once it considers the database to be bigger than expected.

Missing pieces (Towards version 3 feature complete).

All the missing features belong to a milestone: Feature complete. This milestone can be listed here: https://github.com/SpiderLabs/ModSecurity/milestone/9 For easy reading, they are also listed below.

Actions

Variables

Operators

Others

What we don't want to support anymore

The list of unsupported features is very minimal at this point, although it may be bigger till the feature complete milestone. The single item is listed below.

Clone this wiki locally