Introduction

FortiWeb supports Lua scripting to customize the behavior of your application delivery controller, including defining custom content rules, manipulating HTTP requests and responses, and performing advanced traffic handling.

The following provides an overview of how Lua scripting works in FortiWeb:

Integration with FortiWeb

Lua scripting is integrated into the FortiWeb platform and can be executed at various stages of the request–response lifecycle.

Event Triggers

Lua scripts can be triggered at specific points in the HTTP and TCP request–response flow, such as when a request is received, before it is forwarded to a backend server, or after a response is received.

Access to Request and Response Data

Lua scripts can access request and response data. For HTTP scripting, this includes headers, cookies, and payloads, enabling inspection and modification as needed.

Custom Logic

Lua scripts allow you to implement custom logic, such as routing decisions, content manipulation, header enrichment, authentication, and logging.

Integration with FortiWeb Features

Lua scripting extends FortiWeb functionality by integrating with features such as load balancing, SSL offloading, caching, and traffic management policies.