Absence of filtering or rate limiting permits traffic to overload downstream services and facilitates brute-force activity.
Unrestricted Request Traffic Overwhelms Downstream Services
CCC.LB.TH01
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Core.CP04 | Transaction Rate Limits | The service can throttle, delay, or reject excess requests when transactions exceed a user-specified rate limit, and always provides industry-standard throughput up to that limit. |
| CCC.LB.CP23 | Web Application Firewall Integration | The service can integrate with a web application firewall so that only legitimate traffic reaches backend servers, blocking malicious requests. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.LB.CN11 | Attach a Web Application Firewall to Internet-Facing Listeners | Ensure that application-layer traffic from the internet is inspected and filtered before it reaches backend targets. |