Docker

Overview

CloudGuard WAF can be deployed using Docker Images in one of two main configurations:

• Single Docker - a single docker image containing a managed reverse proxy server and the CloudGuard WAF Security agent.

• Dual Dockers - NGINX Reverse Proxy Docker or Kong API Gateway Docker + CloudGuard WAF Security Agent Docker

  

  

The following table compares the two options:

	Single Docker	Dual Docker
CloudGuard WAF	Full	Full
NGINX	Managed Centrally via WebUI/API or Locally	Managed Locally
Kong	Not Available	Managed Locally
Upgrade	Standard	Each Docker can be upgraded separately
Docker Compose protecting a specific Application	Supported	Not Supported
Run in PaaS platforms such as Azure App Services	Supported	Not Supported

Deployment Instructions

Single Docker

Dual Docker: NGINX/Kong/Envoy + Security Agent