Skip to content

Latest commit

 

History

History
31 lines (22 loc) · 1.34 KB

traffic-sequencing.md

File metadata and controls

31 lines (22 loc) · 1.34 KB
copyright lastupdated subcollection
years
2024
2024-04-09
cis

{{site.data.keyword.attribute-definition-list}}

Traffic sequencing

{: #traffic-sequencing}

When working with {{site.data.keyword.cis_short_notm}}, it can sometimes be difficult to tell which operation is going to run first (for example, whether firewall rules run before edge functions or page rules). To help you follow the traffic flow, keep in mind the following traffic sequence.

  1. DDoS

  2. URL rewrites

  3. Page Rules

  4. IP Firewall

  5. WAF / Firewall Rules The general traffic sequence for CIS Firewall features is:

    1. Firewall Rules
    2. WAF
    3. Rate Limiting

    Based on the actions and priority settings of the rules, steps in the firewall sequence can be bypassed. For example, a firewall rule with an early priority that allows certain traffic is processed first, and then skips over the rest of the rules in the sequence. {: note}

  6. Edge Functions

  7. Load Balancer