---
title: Next-Gen WAF for Apache 0.317
summary: null
url: >-
  https://www.fastly.com/documentation/reference/changes/2016/02/ngwaf-module-apache-0.317
---

- Originally HTTP methods that were inspected where explicitly listed (allowlisted, e.g. "GET",
  "POST"). The logic is now inverted to allow all methods not on an ignored list (blocklisted,
  e.g. "OPTIONS", "CONNECT"). This allows for the detection of invalid or malicious HTTP requests.
- Added backward compatibility support for using the agent RPCv1 protocol
  (e.g., with `-rpc-version=1`)
- Added the module base address to the startup message to aid debugging
  EX: SigSci Apache Module version 0.123 starting (base `7f08e4e86000`)
- Improved log messages when reading the request body
- Fixed a potential crash if a request times out