title: How can we control malicious calls to a web application with Nginx modsecurity module?
body: <p>There is much commercial software(Akamai, Cloudflare, etc) to control the malicious calls/attacks (XSS, injection, DDOS, etc). Although, can we use ModSecurity with Nginx ? How to write custom rules in Lua to avoid major vulnerabilities for my web application. May i get some guidance on this? is there any opensource templates to follow?</p>