Web Application Firewall in Istio

[Gabriel_Lasso]

I am looking to a way to have something like an Web Application Firewall inside my istio cluster, to protect against well known attacks, such as DDOS, XSS, SQLi, etc.

I found a post from 2019 where were no direct way to do this.

L7 protection (XSS, SQL injection) policies

Hello. I’ve been trying to find a good way to implement L7 protection policies like XSS and SQL injection with Istio but haven’t had any luck so far. Something along the lines of modsecurity for nginx. What’s a good way to do something like this in Istio? I’ve looked at Envoy filters but none of the existing ones seem to fit here, so that would mean creating a custom one, not to mention the backward compatibility issue described here: https://istio.io/docs/reference/config/istio.networking.v1…

Now, two years later, do we have something better for this?