DAV NGWAF on Red Hat Enterprise Linux
This server is where Astro Pema AI LLC packages, installs and tests DAV NGWAF on Red Hat Enterprise Linux 10, working toward Red Hat software certification and a listing in the Red Hat Ecosystem Catalog.
What runs here
The same stack that protects our production servers, installed the way a customer would install it on RHEL.
Edge layer
NGINX terminates TLS and logs every request for the first DAV detection engine.
Application layer
Apache behind NGINX, watched by a second engine that sees only what the edge let through.
Detection engine
A Rust IDS that scores requests with signature rules and a CNN-GRU model, and maps detections to MITRE ATT&CK.
Enforcement
Repeat offenders are dropped at the network layer with nftables/ipset sets, under firewalld and SELinux enforcing.
DAVSOC
The security operations dashboard: detections, correlation with Suricata alerts, and host visibility.
Packaging
Engine, dashboard and edge configuration delivered as RPM packages, installed and updated with dnf.
Status
Progress toward certification on Red Hat Enterprise Linux 10.
- RHEL 10 environmentServer built and hardened: firewalld, fail2ban, SELinux enforcing, IPv4 only.
- Partner program enrollmentApplication submitted to Red Hat Partner Connect (Build module).
- Web stack and detection enginesNGINX and Apache in place; engines being built for x86_64.
- RPM packagingEngine, DAVSOC and edge configuration as installable packages.
- Certification testingRed Hat's partner test suite, with results submitted for review.
- Ecosystem Catalog listingProduct listing with documentation.
This is a test system. Traffic reaching it may be inspected and blocked by DAV NGWAF as part of testing. For product information, documentation or a guided demo of the SOC dashboard, visit davngwaf.com.