About module-agent deployment
Last updated 2025-04-15
IMPORTANT
This guide only applies to Next-Gen WAF customers with access to the Next-Gen WAF control panel. If you have access to the Next-Gen WAF product in the Fastly control panel, you can only deploy the Next-Gen WAF with the Edge WAF deployment method.
The Core WAF deployment method includes both module-agent and agent-only deployment options. With a module-agent deployment, you're responsible for managing your Next-Gen WAF deployment in your hosting environment.
The module-agent topology includes both the Next-Gen WAF module and the Next-Gen WAF agent components. The module listens for incoming requests and passes them to the agent for a decision. The agent decides whether the request should be permitted to continue, blocked, rate limited, or tagged with signals. After receiving a decision from the agent, the module then blocks, allows, or rate limits requests in accordance with that decision.
To set up a module-agent deployment, complete the following steps:
Installing the module
After installing the Next-Gen WAF agent, install the variation of the Next-Gen WAF module that is appropriate for your hosting environment. The module can exist as a plugin to your web server or as a language or framework specific implementation.
Web server module options
Web server module variations are installed to extend the request handling logic and communicate with the agent for subsequent advice. The web server module options are as follows:
Language and framework specific module (RASP) options
The language and framework specific module variations are installed at the application layer. The language and framework specific module options are as follows:
Open source module options
Our open source modules follow either a Fastly-service or self-service model.
- Fastly-service model: modules that Fastly updates and provides technical support for.
- self-service model: modules that have a public-only development workflow and that Fastly will not update or provide technical support for.
| Module | Fastly-service model | Self-service model | License |
|---|---|---|---|
| Golang module | ✔ | MIT | |
| PHP module | ✔ | MIT | |
| Python module | ✔ | MIT |
TIP
Per the MIT license included in the repositories for our open source modules, you may use our open source modules without restriction.
Custom module option
You can write a custom module to serve as the deployment entity in your Core WAF deployment. The custom module must be compatible with our data flows.
Verifying your installation
After installing the agent and module, verify your installation:
- Log in to the Next-Gen WAF control panel.
- From the Sites menu, select a site if you have more than one site.
- Click Agents in the navigation bar near the top of the screen.
- Check the module version under Module to confirm the correct version is listed.
NOTE
Until there has been at least one request since the agent and module were installed, the module information won't be listed. Once there is traffic the module information will be populated.
Do not use this form to send sensitive information. If you need assistance, contact support. This form is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
