A. The PKP(Public Key Pinning) and MITM(Man in the Middle) is the security technology to prevent attacks from the internet. It mapping the public key which stores in the client’s server and the public key received by TLS handshake while connecting to the server. If the mapping failed, the connection will be blocked
A. Since load balancing needs to allocate multiple servers, register all server IP is required (In the case of Server traffic which already using a load balancer, no need to use SLB on WAF. Users shall register the IP of a load balancer while registering the domain name.). For more config information, please refer following Read more about How do I set up the SLB?[…]
A. SLB is using the Hashing algorithm for load balancing. Hashing algorithm generates the Hashing Key which is based on customers’ network information then is used for load balancing.
A. SLB stands for Server Side Loadbalancing, which is a feature on WAF that load balances the web traffic from multiple servers. SLB will health check the registered server on WAF and only transfer traffic to healthy ones. If all servers are abnormal, the sorry page registered on WAF will respond or redirect to a Read more about What is SLB?[…]
A. Bot detection uses JS Challenge and Captcha Challenge to protect the webserver from the malicious bot by identifying clients who are suspected of being malicious bots.
A. Robots are acting more humans-like, and becoming more intelligent. In order to prevent attacks, it is necessary to distinguish bots in advance.
A. CAPTCHA is a turning test to tell humans and bots apart. The application tests to see if the computer can recognize the information from a distorted image or not. While computers have hard time recognizing the information on the distorted image, it is not difficult for people to do so.
A. Captcha is anacronym of Completely Automated Public Turing test to tell Computers and Humans Apart. It’s run tests to distinguish computers(bot) from humans.
A. JS Challenge can prevent automatic attack (DoS/DDoS attacks, brute force attacks) from hackers.
A. JS challenge is referred to JavaScript challenge. By inserting JavaScript on a web page to check whether it can be interpreted in web browsers. It will browse the page if the parsing script works normally.
