tencent cloud

Tencent Cloud EdgeOne

DocumentationTencent Cloud EdgeOneDDoS & Web ProtectionWeb ProtectionRelated ReferencesWeb Protection Request Processing Order

Web Protection Request Processing Order

Download
Focus Mode
Font Size
Last updated: 2023-07-28 14:35:46
When Web Protection receives a request, it will first go through each security module in the following order, and only requests that have passed the security module scans will continue to be processed by other function modules.
Module processing order
Processing method of requests
Exception rules
When a request matches multiple rules, all matched rules apply.
Custom rule
When a request matches multiple rules, they are executed in order from high to low priority (priority value from small to large).Note 1
Rate limiting
All rules hit by the request are counted, and rules that meet the rate condition apply independently.Note 2
Rules that meet the rate condition are executed in order from high to low priority (priority value from small to large) .Note 2
CC attack defense
When a request hits multiple rules, all matched rules apply.
Bot management
For details, please see Bot Management.
Note:

Note 1:
When a request matches multiple custom rules, if a higher priority rule handles the request (except for observation), the request will not continue to match lower priority rules. When the priorities are the same, the actions are executed in the following order: observe > release > Managed challenge > JavaScript challenge > redirect > Return specified page > blocking IP > intercept.

Note 2:
Hitting an effective rate limiting rule does not affect the statistics of other rate limiting rules. When the same request hits multiple rate limiting rules, the matching and handling are performed according to the priority order of the effective rate limiting rules. When multiple rate limiting rules with the same priority are effective and matched by the request at the same time, the actions are executed in the following order: observe > release > Managed challenge > JavaScript challenge > redirect > Return specified page > blocking IP > intercept.

Previous Topic: Web Security Monitoring AlertNext Topic: Action

Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback