Litespeed

Does ASL work with LiteSpeed?

Partially, but the Web Application Firewall does not. LiteSpeed has a proprietary implementation of mod_security, the Web Application Firewall (WAF) module we use in Apache.

Litespeeds implementation is is not a drop in replacement for the real mod_security module. Unfortunately, it does not support the full rule set or rule language. It is also not documented so we have have had no luck determining what it does support. We can say that it is not compatible with modern mod_security rules.

To currently support LiteSpeed we would have to significantly weaken the rules, and they would also be much slower with LiteSpeed. This is actually not because LiteSpeed is slower than Apache (Litespeed claims the opposite), but because the LiteSpeed WAF module does not support the new rule language in mod_security that allows us to design in massive performance enhancements.

If you want to use LiteSpeed, you will either have to forgo web application protection, or you will need to install an apache proxy in front of LiteSpeed to use our WAF protection.

We do encourage you to encourage LiteSpeed to support the full mod_security rule language, and also to document their implementation - as well as to reply to our emails. We would really like to be able to support it!