Accelerate security modernization with edge computing

Explore how edge computing enhances security with Firewall, DDoS Protection, and observability products for effective threat detection and system resilience.

View as Markdown

Edge computing capabilities can help you safeguard your applications and their content, benefiting you from modern logic that requires minimum management and observability products to monitor requests while focusing on your core business objectives.

By implementing efficient and effective security measures at the edge, you can ensure faster threat detection and response times, leading to a more robust and proactive security posture, as well as significantly reducing latency, enhancing data privacy, and improving overall system resilience.

This use case is ideal for organizations looking to build a strong online presence and protect valuable business assets.

Security Modernization Architecture Diagram

Security Modernization Architecture Diagram

  1. A request reaches Azion Web Platform.
  2. Firewall processes the request.
  • DDoS Protection detects if there are DDoS or DoS attacks and either blocks the request and mitigates the attacks or allows the request.
  1. Firewall Rules Engine identifies if there are rules from WAF, Network Shield, and Bot Manager.
  2. Applications Rules Engine identifies if there are rules related to caching, image optimization, cookies, and redirects, among others.
  • If the request doesn’t match a Firewall rule and isn’t blocked, the request continues the flow.
  1. If the content isn’t cached on the application, the request proceeds to the origin to be processed.
  2. Applications or Firewall Rules Engine executes any rule configured for the Response Phase.
  3. The final response is delivered to the client.
  4. Activity can be observed through Real-Time Events, Real-Time Metrics, and GraphQL API or using a Data Stream connector to feed event logs into your stream processing, SIEM, and big data platforms.

Components

  • Applications: your application running on top of the Azion Web Platform.
  • Firewall: executes its modules and security rules.
    • DDoS Protection: detects and mitigates DDoS and DoS attacks.
    • Web Application Firewall: allows you to configure protection against attacks and vulnerabilities.
    • Network Shield: allows you to create lists with IP addresses or countries with suspicious behavior and restrict their access.
    • Functions: serverless functions that run on Azion Runtime with low latency, bringing the operational power and security processing closer to the end user.
    • Rules Engine: allows you to create customized security logic through rules to block or allow requests and users.
    • Origin Shield: creates a security perimeter for your origin infrastructure.
  • Data Stream, Real-Time Metrics, Real-Time Events, and GraphQL API: enable you to monitor all Firewall and modules activity.

Implementation

  1. Create an application using one of the recommended options:
  1. Create a firewall and associate it with the configured domain, so all security rules apply to that specific domain.
  • Enable the Web Application Firewall, Network Shield, and Functions modules.
  1. Create a WAF rule set, configuring Threat Type and Sensitivity levels.
  2. Create a network list in Network Shield.
  3. Create your security functions or explore marketplace security integrations like reCaptcha, hCaptcha, Secure Token, JWT, and much more.
  4. Create rules in Rules Engine for Firewall to define the behavior to be executed when the Firewall detects a request matching the criteria defined by the rule sets, network lists, and functions.
  5. Use Observe products to monitor your requests and traffic.