Some stuff about how naxsi really works, no rocket-science inside !

For now, I'll simply put some callgraphs, real stuff will come later

Callgraph with apache-bench (5k requests), all request are blocked :

Callgraph with apache-bench (5k requests), only legitimate requests :

Callgraph with naxsi complied in nginx, but disabled :