You built an online shop using Alibaba Cloud services (ECS, RDS, `¦etc.) and very soon you'll have a campaign that every customer that invites 3 friends will get a 50% off coupon. To avoid HTTP flood attacks and ensure only genuine customers (not bots) joining the event, which security product should you choose?
To protect an online shop from HTTP flood attacks and ensure only genuine customers are participating, Web Application Firewall (WAF) is the appropriate choice. WAF is specifically designed to protect web applications from threats such as HTTP flood attacks and bot traffic. It offers features like HTTP flood protection rules and CAPTCHA verification, which help in distinguishing between real users and bots.
Mitigation Against HTTP Flood Attacks Mitigates HTTP flood attacks by using the default protection policies at different levels, custom protection policies, throttling policies, CAPTCHA verification, and blocking policies. https://www.alibabacloud.com/product/web-application-firewall
C. WAF WAF provides the following features - Configure HTTP flood protection rules to defend against HTTP flood attacks - Configure a whitelist for Bot Management
C. Web Application Firewall (WAF) Alibaba Cloud's Web Application Firewall (WAF) is designed to protect web applications from various types of online threats, including HTTP flood attacks and bot traffic. It can detect and filter out malicious traffic, ensuring that your online shop's campaigns are accessible to real customers while blocking unwanted traffic and attacks. WAF helps protect your web applications and ensure the integrity of your promotions and events.