Docker

Overview

CloudGuard WAF can be deployed using Docker Images in one of two main configurations:

Single Docker [Alpha] - a single docker image containing a managed reverse proxy server and the CloudGuard WAF Security agent.

Dual Dockers - NGINX Reverse Proxy Docker or Kong API Gateway Docker + CloudGuard WAF Security Agent Docker

The following table compares the two options:

	Single Docker	Dual Docker
CloudGuard WAF	Full	Full
NGINX	Managed Centrally via WebUI/API or Locally	Managed Locally
Kong	Not Available	Managed Locally
Upgrade	Standard	Each Docker can be upgraded separately
Docker Compose protecting a specific Application	Supported	Not Supported
Run in PaaS platforms such as Azure App Services	Supported	Not Supported

Single Docker

Dual Docker

CloudGuard WAF

Full

NGINX

Managed Centrally via WebUI/API or Locally

Managed Locally

Kong

Not Available

Managed Locally

Upgrade

Standard