Azhar457/jarswaf ? reverse-engineered prompt

Build me a high performance web application firewall and reverse proxy that can sit in front of a normal web app and inspect HTTP and HTTPS traffic in real time. I want it to have a simple admin dashboard where I can see traffic, blocked requests, logs, and basic security status, plus a way to manage rules and proxy targets. It should support a single server setup where everything runs together, and also a split setup with a central controller and separate agents. Please make the first time setup easy with a one command installer, automatic initial password generation, and a forced password change on first login.

I also want support for rule based attack detection, basic anomaly scoring, request normalization, and optional plugin style extensions. If it makes sense, add Linux packet filtering support for DDoS mitigation and a clean CLI for starting, stopping, and checking status. Use the current docs online if you need to, and make it feel polished enough for real use.