Since NGWAF don’t have an official Caddy (GitHub - caddyserver/caddy: Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS · GitHub) plugin (well, Caddy isn’t like nginx or HAproxy, I believe its not used extensively in enterprise settings), and all my servers are running Caddy, I just had to try and made a NGWAF module as a Caddy plugin using on the official Go API (GitHub - signalsciences/sigsci-module-golang: Signal Sciences module for Go · GitHub)
and… it has already caught some weird bot requests trying to do directory enumeration while mimicking AI bots in UA…
Thanks Fastly very much for providing very generous sponsorship thru the Fast Forward program (Fast Forward | CDN & Edge Support for Open Source | Fastly)!