3 ms·

It would be really nice if this were integrated directly with ELB and/or API Gateway. The CloudFront requirement makes it quite expensive - especially for peopl

It would be really nice if this were integrated directly with ELB and/or API Gateway. The CloudFront requirement makes it quite expensive - especially for people using custom SSL certificates (without resorting to SNI). CloudFront (or any CDN) is great for serving static/cached content, but for the kind of services WAF is designed to help protect, it wouldn't make a lot of sense to use CloudFront (apart from WAF) as it would just be passing the requests through to another load balancer/server.

sneak 11y ago
In general, if you're not using SNI, you're doing it wrong. There are probably a dozen orgs who can legitimately claim to absolutely need to support pre-SNI clients, but those shouldn't be on AWS.
- carterehsmith 11y ago
  >> In general, if you're not using SNI, you're doing it wrong. Does that apply to wildcard SSL certs, too?
- danielsju6 11y ago
  Even as of a year ago the major parts of Android, including the downloads application, didn't support SNI.
blantonl 11y ago
Cloudfront works with dynamic content and acts much like Varnish does in those scenarios.