Projects / AppSamurai


AppSamurai is a mod_perl based system to protect vulnerable or sensitive Web applications. The target use is in reverse proxy configurations, with an Apache/mod_perl reverse proxy inside a DMZ and a backend Web server in another DMZ or an internal network. AppSamurai's features include a modular, multi-factor authentication system, form based or basic auth based logins, encrypted storage of session data on a proxy, the ability to use any Apache::Session storage type (including databases for clustered deployment), and the ability to configure it from httpd.conf.

Operating Systems

Recent releases

  •  04 May 2008 14:03

    Release Notes: This release adds nonce and signature to the login form and checking in Apache::AppSamurai::login(). All form logins must now provide a valid nonce and signature. It adds, an authentication module for the Authen::Simple authentication framework, supporting numerous authentication methods (Kerberos, LDAP, PAM, etc.) It improves detection/requirement handling for mod_perl and Crypt::CBC ciphers.

    •  01 Oct 2007 21:40

      Release Notes: The first release with Apache 2.x/mod_perl 2.x support. Unified Apache 1.x/mod_perl 1.x and Apache 2.x/mod_perl 2.x support, and example config. Crypt::CBC is used for session data encryption, with support for various block cipher modules. This release ships with ExtUtils::MakeMaker Makefile.PL for users without Module::Build (Module::Build install is still preferred).

      •  15 Jul 2007 12:53

        No changes have been submitted for this release.


        Project Spotlight


        A Fluent OpenStack client API for Java.


        Project Spotlight

        TurnKey TWiki Appliance

        A TWiki appliance that is easy to use and lightweight.