Using Google Cloud Armor
1. Using Google Cloud Armor
Google Cloud Armor is a DDoS and application defense service. It delivers defense at scale against infrastructure and web application Distributed Denial of Service attacks using Google’s global infrastructure and security systems. Similar to CDNs, Google Cloud Armor protection is delivered at the edge of Google’s network and can block attacks close to their source, before they have a chance of affecting your applications. Google Cloud Armor works with Application Load Balancer to provide built-in defenses against infrastructure DDoS Attacks. Additionally, Google Cloud Armor enables you to customize your defenses and mitigate multivector attacks, such as enforcing access control to allow or restrict user traffic based on IPv4 and IPv6 addresses or CIDRs. Google Cloud Armor also works with security offerings from security partners, enabling you to build a comprehensive security model for your services. Google Cloud Armor defense is customized using a security policy which can contain one or more rules. Rules tell your security policy what to do (the action), when to do it (the condition) and where to apply the rule (the target). Google Cloud Armor also provides several predefined rules to defend against cross-site scripting (or XSS) and SQL injection (or SQLi) application-aware attacks. Google Cloud Armor also provides the following features: Variety of load balancer support. Google Cloud Armor now supports all external Application Load Balancers, including classic Application Load Balancers. Google Cloud Armor also supports regional internal Application Load Balancers, global external proxy Network Load Balancers (TCP/SSL), classic proxy Network Load Balancers (TCP/SSL), and external passthrough Network Load Balancers (TCP/UDP). Rate-based rules help you protect your applications from a large volume of requests that flood your instances and block access for legitimate users. Adaptive protection helps you protect your Google Cloud applications, websites, and services against L7 distributed denial-of-service attacks such as HTTP floods and other high-frequency layer 7 (application-level) malicious activity. Google Cloud Armor bot management with reCAPTCHA Enterprise helps you evaluate and act on incoming requests that might be from automated clients. Custom rules language enables you to define prioritized rules with configurable match conditions and actions in a security policy. Refer to the release notes for the latest Google Cloud Armor updates. To explore Google Cloud Armor features further, check out the ‘Securing your Network with Cloud Armor’ course. Links to the release notes and the course are provided in this module’s course resources.2. Let's practice!
Create Your Free Account
or
By continuing, you accept our Terms of Use, our Privacy Policy and that your data is stored in the USA.