tnAnGel / Aegis Self-hosted anti-DDoS reverse proxy and WAF in Rust — WAF, JA3/JA4 fingerprinting, eBPF/XDP, challenge ladder, HTTP/3