The service can integrate with a web application firewall so that only legitimate traffic reaches backend servers, blocking malicious requests.
Web Application Firewall Integration
CCC.LB.CP23
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.LB.TH01 | Unrestricted Request Traffic Overwhelms Downstream Services | Absence of filtering or rate limiting permits traffic to overload downstream services and facilitates brute-force activity. |
| CCC.LB.TH12 | Application-Layer Inspection Is Absent or Bypassed | The web application firewall may not be attached to the listener, may run in detection-only mode, or may be bypassed by traffic that is passed at layer 4 or carried over an upgraded WebSocket connection. Malformed or exploit payloads then reach backend targets without inspection, compromising the integrity and availability of those targets. |