Web Management Console
CheeseWAF includes a modern single-page visual management console built with React and hosted directly by the cheesewaf process on its management listener. After completing System Setup, navigate to the configured management endpoint. Standalone deployments may use the configured HTTP/HTTPS scheme; the official Docker Compose file publishes the admin listener as HTTPS on the Docker host loopback, so use https://127.0.0.1:9443/ there (or an SSH tunnel), not a remote host URL unless you explicitly change the bind address.
The console enforces session cookie statefulness with strict double-submit CSRF defenses (dynamically adjusting Secure flags when running on unencrypted local loops and enforcing them under HTTPS), and supports enabling CAPTCHA challenges on login.
Console Routing Matrix
| Frontend Route | Module Scope & Capabilities | Documentation Reference |
|---|---|---|
/ | Dashboard: Real-time QPS, drop statistics, and security summaries | Monitoring & Logs |
/sites | Sites: Domain mappings, upstream origins, 4 load balancing algorithms, and health checks | Site Management |
/ssl | SSL Certificates: Certificate upload and automated ACME renewals | TLS & Certificates |
/rules | Rules: Site custom regex rules, YAML/JSON batch import/export, and live RE2 validation | Custom Rules |
/review | Threat Review: ALAP offline threat triage, decision claims, and rule promotion | ALAP Review |
/logs | Log Explorer: Trace ID lookups and multi-dimensional query filters | Monitoring & Logs |
/ip | IP Management: IP allow/denylists, GeoIP restrictions, and threat feeds | IP, Geo & Fingerprints |
/protection | Protection: AST semantic engine toggles and paranoia levels | Security Policies |
/bot-challenge | Bot Protection: JS challenges, slider CAPTCHAs, and waiting room policies | Bot & CAPTCHA |
/edge | Edge: Header rewriting, static caching, and Gzip/Brotli compression | Edge Features |
/ai | AI Settings: Model connectivity, self-learning jobs, and automated adoption | ALAP Review |
/monitor | Monitoring & Alerts: Prometheus metrics, Remote Write, and Webhook alerts | Monitoring & Logs |
/apisec | API Security: Endpoint discovery, schema validation, and rate limiting | API Security |
/users | User Management: Administrator accounts, role scopes, and 2FA credentials | Operations |
/ops | Operations & Cron: Automated task scheduler and log maintenance | Storage & Scheduling |
/updates | Updates: Version status, release channel information, and update checks | Operations |
/block-pages | Block Pages: Response templates, HTML sanitization, and sandboxed preview | Block Pages |
/attack-map | Threat Map: Global attack visualization with official borders and 100% offline 3D Earth | Monitoring & Logs |
/cluster | Cluster: Node health, token issuance, certificate rotation, Ansible bundle export, and orchestration task views | Cluster HA |
/system | System: Runtime configuration, NTP synchronization, and backup management | Operations |
/captcha-lab | CAPTCHA Lab: Interactive puzzle testing and asset debugging | Bot & CAPTCHA |
The console provides light, dark, and custom color accents. Visual preferences are stored locally in the browser and do not impact data plane operations.