【笔记】堡塔云WAF学习笔记

发表于 2026-05-12 阅读次数：

前言

堡塔云WAF是一款基于语义分析的Web应用防火墙（官网）

安装

1	URL=https://download.bt.cn/cloudwaf/scripts/install_cloudwaf.sh && if [ -f /usr/bin/curl ];then curl -sSO "$URL" ;else wget -O install_cloudwaf.sh "$URL";fi;bash install_cloudwaf.sh

堡塔云WAF单机版

+--------------------------------------------------------------------------------------
| Bt-WAF FOR CentOS/Ubuntu/Debian
|
| Copyright © 2015-2099 BT-SOFT(https://www.bt.cn) All rights reserved.
|
| The Bt-WAF URL will be https://SERVER_IP:8379 when installed.
|--------------------------------------------------------------------------------------
| 为了您的正常使用,建议使用全新或纯净的系统安装,不支持已使用80 443 33060端口的系统安装
|
| 堡塔云WAF使用 Docker 服务并创建 cloudwaf_nginx cloudwaf_mysql 容器
|
| 容器不存储数据,存储于宿主机:/www/cloud_waf,为了您的数据安全请勿在容器内存储数据
+--------------------------------------------------------------------------------------

取消安装请输入 n, 确认安装请输入 Y 或 y, 最后按回车键执行.
Do you want to install Bt-WAF to the /www/cloud_waf directory now? (Y/y/n): y



==================================================================
堡塔云WAF安装完成! Installed successfully!
==================================================================
外网访问地址: https://0.0.0.0:8379/xxxxxxxxxx
内网访问地址: https://0.0.0.0:8379/xxxxxxxxxx
username: xxxxxxxx
password: xxxxxxxx
If you cannot access the Bt-WAF 
release the following Bt-WAF port [8379,80,443] in the security group
若无法访问堡塔云WAF，请检查防火墙/安全组是否有放行[8379,80,443]端口

=========================打开堡塔云WAF前请看=======================

 因默认启用自签证书https加密访问，浏览器将提示不安全
 点击【高级】-【继续访问】或【接受风险并继续】访问
 参考教程：https://www.bt.cn/bbs/thread-117246-1-1.html

==================================================================