DDoS and edge protection
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
protect public endpoints from volumetric and application-layer attacks.
Planned topics
- Use the provider's DDoS protection and a CDN to absorb volume at the edge.
- WAF rate limiting and bot controls handle application-layer floods and scraping.
- Hide origins: accept traffic to the origin only from the CDN or load balancer.
- Plan capacity and autoscaling limits so an attack does not become a cost attack.
- Have an incident playbook with contacts; verify tiers and features before recording.
Draft outline details
Demonstration
a chain: DNS, CDN with DDoS protection, WAF with rate limits, load balancer, application, with the origin locked to the CDN.
Check your understanding
Why restrict the origin to the CDN?
Show answer
So attackers cannot bypass edge protection.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.