DDoS protection
Web protection
Domain, WAF expression, rate limit and certificate status stay on one record.
Web Shield
- Domain record
- WAF expressions
- Rate limit
- Certificate status
Protection demonstration
The attack stops before the server.
Incoming traffic is separated at the DDOS ARMOR core. Attack packets drop at the core. Only the clean path continues to the server. This is a demonstration, not a live filter or a live measurement.
- AnalysisThe flow is read as it approaches the core.
- SeparationAttack packets leave the clean path.
- DropMarked packets stay outside the core.
- RoutingClean packets continue to the server.
Bot check
The hold, the browser trace, and a short proof of work stay tied to the same attempt. A new attempt does not keep the previous time.