Why am I getting CloudFront 403 errors on multiple websites?
I'm suddenly seeing 403 Forbidden errors on several websites, including SoundCloud. SoundCloud appears to be online, and I'm signed in, but I still can't access it. What could…
WAF
Should Azure API Management and WAF live in the hub or a dedicated spoke?
We're deploying several applications that need an API gateway. We're considering placing Azure API Management and the WAF in the hub, then reaching the application endpoints through fully…
Can CloudFront, WAF, and Route 53 Be Restricted to ca-central-1?
I'm new to AWS and working on a project with strict data-residency requirements. I need to determine whether CloudFront, AWS WAF, and Route 53 can be configured so…
Is It a Good Idea to Use CloudFront with API Gateway?
I'm considering adding CloudFront in front of my REST API Gateway since they've rolled out flat rate pricing that includes WAF and DDoS protection. From an infrastructure design…
Why is Azure blocking my access to a pizza ordering site?
I'm a bit confused about Azure since I've never used it before, but it seems to be blocking me from visiting specific websites on my computer. I was…
Are Custom Rules for a WAF Too Resource-Intensive?
I'm considering adding some custom rules to my Application Gateway WAF policy to exclude certain URIs from specific OWASP SQL injection checks. We're facing a lot of false…
Are Custom Rules for WAF Quite Resource-Intensive?
I'm looking to implement custom rules for my Application Gateway Web Application Firewall (WAF) policy. Specifically, I want to exclude certain URIs from some of the anomaly scoring…
What to Use After Kubernetes Ingress-Nginx EOL in 2026?
With ingress-nginx set to reach end-of-life in March 2026, many of us are looking for alternatives. I've looked into a few options and Traefik seems promising, but I'm…
How to Handle Special Characters in User Input Without Disabling Azure WAF?
I'm working with an ASP.NET web application that's secured by Azure Application Gateway with WAF enabled. I keep encountering an issue where Azure WAF blocks legitimate user input…
What's your go-to Web Application Firewall (WAF)?
Hey everyone! I'm new to system administration after 25 years in development and I'm diving into managing cloud web applications. I've noticed that around 60% of my server…
How to Set Up a Secure Reverse Proxy Architecture?
Hey folks! I'm diving into network segmentation at my workplace, which is about 90% on-prem. The goal is to move our servers to a dedicated VLAN with proper…
How to Restrict Access to Azure Web Apps via App Gateway with WAF?
I'm trying to secure a specific URL that is linked to an Azure Application Gateway featuring WAF v2. My goal is to limit access to this URL so…
How Can I Limit Access to My Azure Web Apps Through Application Gateway with WAF?
I have a URL that's set up with an Azure Application Gateway equipped with WAF v2. I want to limit access so that only certain App Services, like…
How Can I Effectively Block Traffic from a Specific Country?
I'm looking for effective methods to block all traffic coming from a specific country. Are there different approaches I should consider depending on my hosting setup, especially if…
Can I Exclude Specific URLs from WAF Managed Rule Policies?
I'm trying to find a way to exclude certain URL paths from my Web Application Firewall (WAF) managed rule policies because they're triggering SQL injection rules, leading to…
Can AWS WAF Automatically Block Fraudulent Activity Based on JA4 IDs and IP Changes?
I'm running a marketplace and we've been experiencing various forms of credit card fraud. The fraudsters are trying to evade detection by constantly changing their IP addresses after…
How can I effectively fight off a DDoS attack with legitimate-looking traffic?
Hey folks, I'm currently dealing with a frustrating DDoS attack on my AWS-hosted service and I need some solid advice. Here's the situation: My setup consists of users…
Will My WAF Get Deleted When I Close My AWS Account?
I have a quick question: When you close your AWS account, does the Web Application Firewall (WAF) get deleted along with it? I set up my account last…
How can I improve my rate limit rules on WAF with CloudFront?
I'm working with a CloudFront distribution in front of an internal Application Load Balancer (ALB) using the new VPC origins feature, and I have a WAFv2 connected to…