waf_live.js

// Request based WAF

function process_client(ip, req_1m, req_5m, req_1h){

    if (req_1m.5xx > 35) {
      ban(ip);
    }
}

function process_domain(domain, req_1m, req_5m, req_1h){

    if (req_1h.5xx > 100) {
      send_notice(domain);
    }
    
    if (req_1h.traffic > 100 * 1000 * 1000) { //In mb
      to_varnish(domain);
    }
}