search

OPEnSLab-OSU / Spool

GNU General Public License v3.0
2 stars 1 forks source link

Implement WAF on internet-facing API before deployment #7

Closed prototypicalpro closed 4 years ago

prototypicalpro commented 4 years ago

While I trust the code is correct and secured to the best of our abilities, a Web Application Firewall (WAF) will provide an extra layer and account for things we forget (string sanitation for example) or things we cannot predict (zero day vulnerabilities). The WAF I recommend is Cloudflare pro due to Cloudflare's business reputation and the services low price ($20/month). Numerous alternatives also exist that would provide similar protection benefits (barracuda, radware, AWS).

eliwinkelman commented 4 years ago

WAF is setup with cloudflare pro 👍