NiceOS EdgeShield Console

Server——

Uptime——

Active connections——

Requests/s——

5xx rate—last sample

WAF blocks——

Traffic

requests per second

Connections

active / idle

Response classes

HTTP zones

System health

API and gateway components

HTTP server zones

HTTP location zones

HTTP upstream peers

states, fails, response time

Stream upstream peers

TCP/UDP

Blocked—parsed events

Detected—detection-only/pass

Top rule—by event count

Top source—by event count

WAF events

The console reads optional NDJSON events from /edgeshield/events/waf.jsonl. The first container MVP should add a small audit-log normalizer that writes this file from ModSecurity audit logs.

Recent access log

Optional endpoint: /edgeshield/events/access.jsonl. When unavailable, this tab remains empty without breaking the console.

Loaded configuration files

requires api_config_files on;

NiceOS EdgeShield Console

Minimal dependency-free web console for NiceOS EdgeShield WAF. It is designed for the NiceOS.Container appliance image and reads metrics directly from Angie API, Prometheus output and EdgeShield JSONL event endpoints.

No Node.js or frontend framework required at runtime.
No Grafana dependency.
Canvas charts, static assets and Angie-native API access.
Designed for container, VM appliance and later Kubernetes deployment.

API paths

/edgeshield/api/angie
/edgeshield/api/connections
/edgeshield/api/http/server_zones/
/edgeshield/api/http/location_zones/
/edgeshield/api/http/upstreams/
/edgeshield/api/stream/upstreams/
/edgeshield/metrics
/edgeshield/events/waf.jsonl
/edgeshield/events/access.jsonl