← All components
Security & identity
WAF / DDoS protection
Filters malicious traffic (bots, injection, floods) before it reaches your services.
When to use
- Any public-facing endpoint
- Login and payment pages
Pitfalls
- Over-aggressive rules block real users; start in count/log mode
Options by provider
The first option is what diagrams show for that provider.
Amazon Web Services
- AWS WAFManaged
- AWS ShieldManaged
Google Cloud
- Cloud ArmorManaged
Microsoft Azure
- Azure Web Application FirewallManaged
- Azure DDoS ProtectionManaged
Open source / self-hosted
- ModSecuritySelf-hosted
- CorazaSelf-hosted
Third-party (works with any cloud)
- Cloudflare WAFManaged
Related concepts
Used in
Not used in any system yet.