ldas.jp
JA
All tags

TAG

#waf

3articles

Routing an Externally Managed Subdomain to Cloudflare Workers — Adding AWS CloudFront + WAF as a Front Layer

An attempt to assign a subdomain managed by an external organization's DNS as a Cloudflare Workers custom domain hit the constraint that Cloudflare's free plan doesn't accept external subdomains as zones. The final solution was to place AWS CloudFront + WAF in front as a termination layer.

cloudflareworkerscloudfrontaws

Stopping Bot Scraping with AWS WAF — Geo Block, JA3 Fingerprint, and UA Block in Stages

A record of blocking bot scraping against a cultural-archive site using AWS WAF, combining Geo block, IPset, JA3 fingerprint, and UA block in stages.

awswafcloudfrontsecurity

Retrofitting CloudFront + WAF onto an Existing Reverse-Proxy Origin: Practical Patterns

An implementation log of migrating a group of services running on Docker + Traefik, with no downtime, to a CloudFront + WAF-protected setup. I cover naming for the origin-only subdomain, pitfalls with shared Security Groups, the case for starting WAF in COUNT mode, cache design for SPARQL/API traffic, and other recurring decision points.

awscloudfrontwafterraform