Add Domain

The upstream address uses the http port (80) by default. Use a colon as separator if the port differs, e.g. 1.2.3.4:8080. If the upstream is using IPv6, please enclose the address in square brackets, e.g. [2001:c0c0:d1d:babe:dead::1].

SSL Certificates

An SSL certificate provides an encrypted connection and is required for the website to function properly.

Website Options

Internet protocols

HTTP/3 provides fast, reliable, and secure Internet connections and improves the mobile user experience. It works over UDP protocol instead of TCP (used by all previous versions of HTTP).Despite these benefits, it may be necessary to disable it during UDP-based volumetric DDoS attacks.

Include security related HTTP-headers and redirect clients from an unprotected website to the protected version. This will force clients to prefer protected website version on repeat visits to the site.

Content caching

Allow BotGuard Ingress Controller to cache all static and media content locally for a long time, like most CDNs do. This helps to open the website faster.

Allow BotGuard Ingress Controller to cache all dynamic content locally for a short time. This helps to mitigate high peak website loads, but may cause delays in displaying new published content.

Security

Enable BotGuard Bot Management and WAF protection service to protect the website against malicious bots, crawlers, scrapers, and hacker attacks.

Mitigate DDoS attacks by limiting the number of simultaneous connections and rate of requests.

Mitigate DDoS attacks by blocking the attacker's IP address at the firewall across the entire cluster instead of 403 errors. Requires bot protection to be enabled.