About a WAF (web protection)
How does Web Protection work?
Aéza Web Protection is a heavy-duty proxy server that allows you to fully filter any number of incoming requests to your site and guarantees 97% to 100% SLA availability (depending on the selected protection plan).
Information
For better understanding, Aéza Web Protection can be thought of as a single receptionist window that directs all visitors to your website's office, or drives away those who are not booked for an appointment with you (bots and DDoS attacks).
How do I get free Web Protection?
To purchase WAF protection, we will need to go to this page.
We will select the free version of the service and go below, where we will specify the future name of this free service in our account, and the address of the website that will be protected by Aéza
Let's click on the "Pay" button
After instant payment without debiting, you will be able to find your protection service in the "Services" section.
How to set up Aéza Web Protection
A video version of how to set up Web Protection is available on our channel here.
Click on the three dots, or arrow, to the right of the purchased Web Protection plan
Next, open the "List of sites" section. On this page you will be able to find the domains you specified when purchasing the protection service, as well as add or remove protection for other domain names.
Information
Next, we will look at how to set up protection, including adding a new domain address (you can skip this part).
Add protection to a new domain address Click the "Create" button to connect the new domain. Specify the address of the site we want to protect and click "Confirm".
Warning
Next, we will consider two options for setting up a domain, for domains purchased from Aéz and for domains purchased from third-party registrars.
Setting up web protection for a created domain purchased from Aéza
After adding the domain, a new domain address will appear in our list. Let's click on it for customization. For domains purchased from our hosting service, we automatically provide an SSL certificate, which will be immediately available to your website visitors once Aéza Web Protection is activated.
Information
SSL Certificate is responsible for securing user data, confirming site fidelity, increasing customer trust and combating fake copies created by scammers.
Now let's add the address of your server hosting your site or service to our security. To do this, click the "Create" button.
Let's write IP address of our server, from which pages will be forwarded to your visitors through the web protection.
Below you can choose the format of web protection, let's take a closer look at how they work:
- "Always" works constantly, in 24/7 mode, filters all passing traffic and is the most preferable in case of regular attacks and the desire to secure the availability of the site at any time of the day
- "Transparent" filters the traffic when your normal rates are exceeded (in case of DDoS) and allows you to get a comfortable use of your site or service in its standard mode of use.
- "Unprotected" completely disables web protection and immediately redirects your visitors' requests to your server's IP address.
Warning
Be careful. In case attackers know your real server IP address (after "No Protection" mode) or have learned it before installing protection, their attack will be directed directly to your server, bypassing web protection. If you have previously encountered DDoS attacks and are worried about knowing your server address, you can contact our tech support to change the IP address of your machine.
Let's save our changes, via the "Save" button.
Click "Save" under the list of entries to apply the protection entries created. From now on, your protection will start filtering incoming traffic in the selected usage mode and with the protection enabled (Always or Transparent mode) your site or service will be protected from any attacks.
Configure web protection for a domain purchased from a third-party registrar:
Click "Create" button to connect our domain.
Click on Create Domain to proceed to its configuration. On the domain protection page, click "Create" to add a new web protection record.
Enter the IP address of the server where our personal site or service is located. Below you can choose the format of web protection, let's take a closer look at how they work:
- "Always" works constantly, in 24/7 mode, filters all passing traffic and is the most preferable in case of regular attacks and the desire to secure the availability of the site at any time of the day
- "Transparent" filters the traffic when your normal indicators are exceeded (in case of DDoS) and allows you to get a comfortable use of your site or service in its standard mode of use.
Let's save the created entry by clicking the "Save" button.
After creating the required number of records, click the "Save" button for the whole list.
Now you will need to specify the IP address of the created web protection for your domain as the A record by copying it from this list. You can specify as you normally would by putting this address instead of your server's IP address. This will allow the web protection to pass through your site traffic and deter DDoS attacks.
After specifying the IP address of the protection in your domain, it will start working in the mode you choose ("Always" or "Transparent"). Your site will be under our protection!
How do I specify my site's SSL certificate
For domains that are not delegated to Aeza, it is also advisable to create and specify an SSL certificate that will be shared with your website clients. This will increase their trust in your site and protect their data.
Information
SSL certificate is responsible for ensuring the security of user data, confirming the fidelity of the site, increasing customer confidence and combating counterfeit copies created by fraudsters.
After specifying the SSL certificate, save your changes with the button below.
After saving your changes, this certificate will be provided to all clients of your site automatically.
Information
In the future, be sure to regularly renew your SSL certificate to avoid it expiring.