Getting Started

Installation

Before anything else, make sure Bulwark has been installed.

Envoy

Bulwark is an Envoy external processor. It needs to be used with Envoy to function. Future roadmap plans include support for other deployment patterns for request processing. The deployment guide covers setting up Envoy to use Bulwark.

Plugins

Bulwark relies on WebAssembly plugins to perform all of its detection logic. You will need a collection of plugins to power Bulwark’s detection capabilities. You can use thecommunity ruleset to get started. Or, see the tutorial on writing your first plugin to supply your own.

Configuration

Bulwark’s configuration file determines which plugins are loaded, from where, and on which paths those plugins will be applied.