Skip to content

DEV Community

SafeLine WAF Guide Series' Articles

Back to 禾's Series

禾

Nov 2

A vs B: Moving SafeLine LTS to the Latest Release — Jump Now or Wait a Month

#migration #upgrade #install #checklist

4 min read

禾

Nov 2

A vs B: Hand-Editing .env vs Scripting Secrets for Manual WAF Deploy

#waf #deployment #docker #configuration

4 min read

禾

Nov 3

A vs B: Terminate Traffic at the WAF or Forward from a Reverse Proxy

#reverseproxy #upstream #deployment #websecurity

3 min read

禾

Nov 3

A vs B: Point Your Domain at the WAF IP or Route Through an Edge Layer

#dns #proxy #setup #security

4 min read

禾

Nov 4

WAF Listener vs Origin TLS: How to Place an HTTPS Certificate

#https #certificate #proxy #checklist

6 min read

禾

Nov 4

Listener TLS vs Upstream TLS: How to Place a TLS 1.2 and TLS 1.3 Requirement

#websecurity #tlscompliance #reverseproxy #firewall

6 min read

禾

Nov 5

A vs B: SafeLine Front Door Versus Direct Origin Health Checks

#websecurity #reverseproxy #uptime #deployment

6 min read

禾

Nov 5

Proxy Protocol vs Forwarded Headers: Preserving the Real Client IP Behind SafeLine WAF

#proxy #clientip #reverseproxy #checklist

4 min read

禾

Nov 6

Listener TLS vs Upstream TLS: How to Place an HTTPS Origin Behind a Reverse-Proxy WAF

#https #reverseproxy #deployment #checklist

5 min read

禾

Nov 6

Shared Placement vs Separate Instances: How to Reverse Proxy Multiple Sites With a Single WAF Instance

#reverseproxy #deployment #websecurity #checklist

6 min read

禾

Nov 7

Direct Console vs Counted Proxy: How to Place the WAF Management Console

#waf #proxy #console #deploy

6 min read

禾

Nov 7

A vs B: Header-Based or Body-Based Matching in WAF Rules

#waf #security #rules #traffic

4 min read

禾

Nov 8

A vs B: Denylist or Allowlist Rules for One Web Application

#waf #docker #reverseproxy #websecurity

4 min read

禾

Nov 8

Balance vs Strict: Choosing a SafeLine Detection Profile That Fits Your Risk Posture

#setup #detection #proxy #policy

3 min read

禾

Nov 9

Domain-Based vs Port-Based WAF Configuration: How to Review Attack Events

#waf #security #domains #ports

4 min read

禾

Nov 9

Direct WAF Placement vs an Existing Proxy Chain: How to Test Path Traversal and XXE

#waf #security #testing #xxe

4 min read

禾

Nov 10

A vs B: Direct WAF Placement vs an Extra Proxy When Investigating Blocked Requests

#waf #security #troubleshooting #deployment

4 min read

禾

Nov 10

Staging Enforcement vs Production Observation: How to Plan WAF Protection Tests

#waf #testing #security #deployment

4 min read

禾

Nov 11

WAF Password Challenge vs Application Login: How to Choose Your Authentication Boundary

#waf #authentication #security #configuration

4 min read

禾

Nov 11

Rule-First vs Context-First: How to Investigate WAF Allowlist and Denylist Logs

#waf #logging #security #configuration

4 min read

禾

Nov 12

Direct Forwarding vs a Local Relay: How to Plan WAF Attack Logs for Syslog

#waf #syslog #logging #security

4 min read

禾

Nov 12

Shared WAF Limits vs Path-Specific Limits: How to Choose Enforcement Placement

#waf #ratelimits #security #urlpaths

4 min read

禾

Nov 13

WAF Front Door vs Direct Origin: How to Validate Blocking with a Code Injection Test URL

#waf #security #testing #injection

4 min read

禾

Nov 13

How to Plan WAF SSL Certificate Replacement: Listener Files vs Upstream Files

#waf #tls #certificates #operations

4 min read

禾

Nov 14

Public WAF vs WAF Behind a Proxy: How to Defend Against AI Generated Attack Payloads

#waf #security #automation #payloads

4 min read

禾

Nov 14

IP Rate Limiting vs CAPTCHA: Why Automated Attack Traffic Changes WAF Tuning

#waf #automation #security #credentialstuffing

4 min read

禾

Nov 15

Rate Limiting vs CAPTCHA: How to Detect LLM Driven Bot Traffic on a Login Page

#waf #bots #authentication #security

4 min read

禾

Nov 15

IP Rate Limits vs Login Challenges: Blocking Credential Stuffing from Residential Proxies

#waf #security #bots #authentication

4 min read