Real-Time Reconfigurable Web Application Firewall For a Distributed Platform

摘要

Some embodiments provide reconfigurable web application firewall (WAF) functionality across a distributed platform. Specifically, the WAF function at each distributed platform server is customizable on a per customer and per inbound message basis. When a server receives an inbound message, the server identities the content or services of which specific customer are implicated by the inbound message. The server screens the inbound message for attacks using a first set of rules and policies defined as part of a production profile from a WAF instance defined by the specific customer while contemporaneously testing the inbound message against a second set of rules and polices defined as part of an audit profile from the same WAF instance. In this manner, the specific customer tests the audit profile rules and policies while still receiving the protections of the production profile rules and policies.

主权项

1. A method comprising:
receiving an inbound message comprising a Uniform Resource Locator (URL) directed to a content or service of a particular content provider; configuring a firewall according to a first set of firewall protections and a different second set of firewall protections defined by the particular content provider; replicating the inbound message, wherein said replicating produces at the firewall a first copy and a second copy of the inbound message; and protecting the content or service of the particular content provider from attacks in the inbound message violating the first set of firewall protections while contemporaneously testing the second set of firewall protections against the second copy of the inbound message resulting from said replicating.