I have a Kubernetes cluster working using Traefik as the reverse proxy.

What is the best way to utilise a for a WAF in this scenario, e.g. something like the NGINX WAF which isn't available for Traefik or the Cloudflare DNS level WAF.