Skip to content

Comment on Ask HN: How to secure website for public launchparent

Comments

Serve traffic behind a load balancer that has a WAF

What is a WAF?

Web Application Firewall.

It’s a feature of an LB that consolidates the actions of blocking ports except for the ones you are using, fail-fast on paths that scrapers tend to check (e.g. /wp-admin, /phpMyAdmin) so it doesn’t end up in normal request logging, set rate limits, fail-to-ban conditions, etc.

Has anyone had any luck with Coraza on HAProxy?

Web application firewall

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.