3 ms·
A few years ago, I had an employer come up with the idea of a web application firewall that involved routing all of the customer's traffic through our network.
by rconti 9y ago
A few years ago, I had an employer come up with the idea of a web application firewall that involved routing all of the customer's traffic through our network. I don't think I've ever been as horrified to be in Ops as I was that day. Thankfully it never came to pass; the architecture was changed. The idea of being in a role where all we could do is make the end user experience worse was fairly terrifying. (Leaving aside the possible benefits of caching of cloudflare-style caching, of course).
- windowsworkstoo 9y agoBut this is very standard for sub layer 7 traffic filtering and DDOS mitigation, so I dont understand your reaction
- rconti 9y agoBecause, like most teams, we had certain resource constraints (time, money, datacenter space, employees, etc). The undertaking of a massive new project that puts greater-than-ever reliability demands on existing infrastructure that is properly sized for the existing tasks is a huge burden.