Skip to content

Commit 4bebe45

Browse files
authored
fix(edge): add info re waf and object storage (#5006)
1 parent 1376f5c commit 4bebe45

File tree

3 files changed

+9
-1
lines changed

3 files changed

+9
-1
lines changed

pages/edge-services/faq.mdx

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,10 @@ Yes, if you choose to [customize your Edge Services endpoint with your own subdo
4242

4343
For now, WAF is only compatible with Load Balancers and Object Storage. You must put other resources behind a Load Balancer in order to benefit from WAF. Watch this space for other solutions in the future.
4444

45+
<Message type="note">
46+
WAF can be configured via the console for Load Balancer pipelines only. To configure WAF for an Object Storage bucket pipeline, use the [API](https://www.scaleway.com/en/developers/api/edge-services/).
47+
</Message>
48+
4549
## Can I use WAF and caching simultaneously?
4650

4751
Yes, you can have both of these features enabled at the same time on the same Load Balancer pipeline. WAF protects your Load Balancer origin only: it does not filter requests served by the cache.

pages/edge-services/how-to/configure-waf.mdx

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,10 @@ To read more about how WAF works, try our [Understanding WAF](/edge-services/ref
2929
- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization
3030
- An Edge Services pipeline for a [Load Balancer](/edge-services/how-to/create-pipeline-lb/) origin
3131

32+
<Message type="note">
33+
WAF can be configured via the console for Load Balancer pipelines only. To configure WAF for an Object Storage bucket pipeline, use the [API](https://www.scaleway.com/en/developers/api/edge-services/).
34+
</Message>
35+
3236
## How to enable and configure WAF
3337

3438
1. In the Scaleway console, navigate to the Edge Services dashboard for the Load Balancer pipeline on which you want to enable WAF:

pages/edge-services/reference-content/understanding-waf.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,6 @@ You can set **exclusions**, so that certain requests are not evaluated by WAF an
3535

3636
In an Edge Services pipeline, WAF sits before the origin stage. This means that WAF only protects your origin, it does not protect or filter requests towards the cache.
3737

38-
3938
<Lightbox src="scaleway-edge-services-pipeline-diag.webp" alt="A diagram shows the elements and workflow of an Edge Services pipeline. The user connects to the customizable Edge Services endpoint (with its SSL/TLS certificate), which fetches content from the Edge Services cache, which itself fetches content to cache from an origin which is either an Object Storage bucket or Load Balancer. A Web Application Firewall sits between the cache and origin, protecting the origin from threats." />
4039

4140
If you have both WAF and cache enabled, requests that can be served by the cache will not go through WAF. Only requests that cannot be served by the cache will be filtered by WAF, and allowed to pass to the origin or not depending on your WAF configuration.
@@ -96,3 +95,4 @@ Each exclusion can consist of:
9695
- WAF protects your origin only, and not your cache.
9796
- You can add a maximum of 100 WAF exclusions
9897
- You cannot currently specify exclusions at the individual rule level. Requests matching exclusion filters bypass WAF entirely.
98+
- WAF can be configured via the console for Load Balancer pipelines only. To configure WAF for an Object Storage bucket pipeline, use the [API](https://www.scaleway.com/en/developers/api/edge-services/)

0 commit comments

Comments
 (0)