-
Notifications
You must be signed in to change notification settings - Fork 29
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
This reverts commit fabe536.
- Loading branch information
Showing
95 changed files
with
992 additions
and
510 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1 +1,3 @@ | ||
If you have a security concern or believe you have found a vulnerability in any part of Zuplo please contact us immediately by emailing us at [email protected]. | ||
If you have a security concern or believe you have found a vulnerability in any | ||
part of Zuplo please contact us immediately by emailing us at | ||
[email protected]. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,3 +1,3 @@ | ||
module.exports = { | ||
presets: [require.resolve('@docusaurus/core/lib/babel/preset')], | ||
presets: [require.resolve("@docusaurus/core/lib/babel/preset")], | ||
}; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -22,4 +22,4 @@ | |
"lvl5": "article h6", | ||
"text": "article p, article li, article pre, article code, article td:last-child" | ||
} | ||
} | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -3,26 +3,55 @@ title: Zuplo and Cloudflare Settings | |
sidebar_label: Cloudflare Settings | ||
--- | ||
|
||
All Zuplo environments are deployed behind Cloudflare's Web Application Firewall, DDoS protection, Bot Detection, and SSL termination. The combination of Cloudflare's network infrastructure and Zuplo's API Gateway help provide critical security and performance capabilities to your API all with zero custom configuration. | ||
All Zuplo environments are deployed behind Cloudflare's Web Application | ||
Firewall, DDoS protection, Bot Detection, and SSL termination. The combination | ||
of Cloudflare's network infrastructure and Zuplo's API Gateway help provide | ||
critical security and performance capabilities to your API all with zero custom | ||
configuration. | ||
|
||
## Web Application Firewall Rules | ||
|
||
By default, WAF settings are in log only mode. This means that no request should be blocked by the Web Application Firewall. | ||
By default, WAF settings are in log only mode. This means that no request should | ||
be blocked by the Web Application Firewall. | ||
|
||
You can choose to enable some preconfigured default rulesets to protect your API Gateway. Our default rules provide a high level of protection with a low likelihood of causing false positives for API transactions. For enterprise customers, Zuplo offers the ability to customize WAF rules to suite your specific needs. | ||
You can choose to enable some preconfigured default rulesets to protect your API | ||
Gateway. Our default rules provide a high level of protection with a low | ||
likelihood of causing false positives for API transactions. For enterprise | ||
customers, Zuplo offers the ability to customize WAF rules to suite your | ||
specific needs. | ||
|
||
## DDos Protection | ||
|
||
DDoS protection is available for every Zuplo API through [Cloudflare's DDoS protection service](https://support.cloudflare.com/hc/en-us/articles/200172676-Understanding-Cloudflare-DDoS-protection). By default, the **rule sensitivy** setting is set to **Essentially Off** meaning almost no requests will be blocked. For paying customers, we offer the ability to modify this setting as needed. | ||
DDoS protection is available for every Zuplo API through | ||
[Cloudflare's DDoS protection service](https://support.cloudflare.com/hc/en-us/articles/200172676-Understanding-Cloudflare-DDoS-protection). | ||
By default, the **rule sensitivy** setting is set to **Essentially Off** meaning | ||
almost no requests will be blocked. For paying customers, we offer the ability | ||
to modify this setting as needed. | ||
|
||
## Security Level | ||
|
||
Cloudflare uses a blanket [security protection setting](https://support.cloudflare.com/hc/en-us/articles/200170056-Understanding-the-Cloudflare-Security-Level) that uses the IP reputation of a visitor to decide if the request should be blocked. By default, Zuplo this security setting is **Off** for all Zuplo APIs. For paying customers, this setting can be customized as needed for your API. | ||
Cloudflare uses a blanket | ||
[security protection setting](https://support.cloudflare.com/hc/en-us/articles/200170056-Understanding-the-Cloudflare-Security-Level) | ||
that uses the IP reputation of a visitor to decide if the request should be | ||
blocked. By default, Zuplo this security setting is **Off** for all Zuplo APIs. | ||
For paying customers, this setting can be customized as needed for your API. | ||
|
||
## Caching | ||
|
||
Cloudflare's global CDN enables your API Gateway to set cache headers in order to reduce the number of requests that hit your origin API. By default, all APIs deployed to Zuplo are configured on Cloudflare to respect existing cache headers. The means that if you want content cached, simply set the [appropriate headers](https://developers.cloudflare.com/cache/about/cache-control/) and Cloudflare's global CDN will cache responses at the edge. | ||
Cloudflare's global CDN enables your API Gateway to set cache headers in order | ||
to reduce the number of requests that hit your origin API. By default, all APIs | ||
deployed to Zuplo are configured on Cloudflare to respect existing cache | ||
headers. The means that if you want content cached, simply set the | ||
[appropriate headers](https://developers.cloudflare.com/cache/about/cache-control/) | ||
and Cloudflare's global CDN will cache responses at the edge. | ||
|
||
## Developer Environments | ||
|
||
Generally, developer environments (i.e. any API running on the domain `zuplo.dev`) has similar security configurations as "production" environments (i.e. any API running on the domain `zuplo.app` or your own custom domain). There are some exceptions where we have slightly more security measures in place to prevent abuse of developer resources. If you see any issues or have requests blocked to your developer instance please contact [[email protected]](mailto:[email protected]) and we can assist with adjusting rules to ensure you can test your API as needed. | ||
Generally, developer environments (i.e. any API running on the domain | ||
`zuplo.dev`) has similar security configurations as "production" environments | ||
(i.e. any API running on the domain `zuplo.app` or your own custom domain). | ||
There are some exceptions where we have slightly more security measures in place | ||
to prevent abuse of developer resources. If you see any issues or have requests | ||
blocked to your developer instance please contact | ||
[[email protected]](mailto:[email protected]) and we can assist with adjusting | ||
rules to ensure you can test your API as needed. |
Oops, something went wrong.