WAF & Security

Per-service web application firewall rules, IP allowlisting, and security event monitoring.

Features

IP Allowlist/Blocklist -- Restrict access to specific IP ranges (CIDR notation)
Rate Limiting -- Per-service request rate limits with configurable windows
Path-based rules -- Block or allow specific URL paths
Security Events -- Monitor blocked requests, rate limit hits, and suspicious activity
gVisor Sandboxing -- All tenant containers run in gVisor for kernel-level isolation
Network Policies -- Kubernetes NetworkPolicies enforce tenant isolation

API
# Get security settings
curl https://railpush.com/api/v1/services/<id>/security \
  -H "Authorization: Bearer <token>"

# Update WAF rules
curl -X PUT https://railpush.com/api/v1/services/<id>/waf-rules \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{
    "ip_allowlist": ["203.0.113.0/24", "198.51.100.0/24"],
    "blocked_paths": ["/admin", "/.env"],
    "rate_limit": {"requests_per_minute": 60}
  }'

# View security events
curl https://railpush.com/api/v1/services/<id>/security/events \
  -H "Authorization: Bearer <token>"

Features​

Features