Tag: Cloud Armor

Cloud Armor Nov. 11, 2024

Proactive Cloud Security: Learning from Google Cloud Armor Vulnerability Discovery - Google Cloud Armor, a security service within Google Cloud Platform, had a critical vulnerability that allowed bypassing of its Web Application Firewall (WAF) rules. The flaw was specific to HTTP/2 requests and involved handling whitespace in query parameters. The vulnerability was reported to Google and a fix was released.

Cloud Armor Cloud Run Oct. 21, 2024

Can I use Cloud Armor with Cloud Run? - Google Cloud Armor is a tool that can be used to secure Cloud Run, but it has some limitations. For example, it can be bypassed if you don't have a load balancer or backend in front of your Cloud Run service. Additionally, Cloud Armor can be expensive, with the enterprise tier costing €200 per month plus additional expenses. Cloudflare is a more affordable alternative that offers similar features and benefits.

Cloud Armor GCP Experience Official Blog Sept. 16, 2024

How EA Sports protects their game servers with Cloud Armor - Electronic Arts (EA) chose Google Cloud Armor to protect its game servers and enhance its DDoS resiliency. EA Sports uses advanced network DDoS protection in conjunction with custom network edge security policies to create a set of security rules to allow or deny traffic at the edge of the network according to user-specified filters.

Cloud Armor Monitoring Visualization Sept. 9, 2024

Monitoring Google Cloud Armor Traffic: A Comprehensive Dashboard - Creating a Cloud Monitoring dashboard to better understand and monitor incoming traffic and attacks evaluated by Cloud Armor.

Cloud Armor Aug. 26, 2024

Monitoring Google Cloud Armor Traffic: A Comprehensive Dashboard - We’ll be creating a Cloud Monitoring dashboard to better understand and monitor incoming traffic and attacks evaluated by Cloud Armor.

Cloud Armor Cloud Identity Aware Proxy Infrastructure July 8, 2024

Set up Load Balancer with Cloud Armor and Identity-Aware Proxy Step-by-Step Guide - This guide provides a step-by-step process for setting up a Load Balancer with Cloud Armor's security capabilities and Identity Aware Proxy for access control.

Cloud Armor Official Blog March 25, 2024

How to improve resilience to DDoS attacks with Cloud Armor Advanced rate limiting capabilities - Google Cloud Armor's always-on Layer 3 and Layer 4 DDoS defense, Web Application Firewall (WAF), Adaptive Protection, bot management, threat intelligence, and rate-limiting capabilities can help enterprises build a comprehensive DDoS mitigation strategy.

Cloud Armor Cloud Load Balancing March 4, 2024

Best Practice — Deploying Google Cloud Armor WAF Rules - Apply a basic WAF policy on a Google Application Load Balancer.

Cloud Armor Google Kubernetes Engine Jan. 29, 2024

Cloud Armor with Google Cloud GKE - An overview of Cloud Armor on GKE.

Cloud Armor Official Blog Dec. 11, 2023

Announcing general availability of Cloud Armor for regional application load balancers - A General Availability of Cloud Armor for Regional External Application Load Balancers, which can help create regionally-scoped Cloud Armor security policies.

Cloud Armor reCAPTCHA Terraform Oct. 2, 2023

Bot prevention using reCAPTCHA v3 & Cloud Armor - This blog post explains how to use reCAPTCHA Action Tokens with Cloud Armor.

Cloud Armor Networking Official Blog July 31, 2023

Introducing Cloud Armor WAF enhancements to help protect your web application and API service - We’re introducing new features in Cloud Armor: granular rate limiting and flexible options to configure custom rules, and custom IP headers to further enhance protections against DDoS and other attacks.

Cloud Armor Cloud Load Balancing Kubernetes May 15, 2023

Secure your Nginx Ingress controller behind Cloud Armor - Properly securing Nginx Ingress controller on GKE.

Cloud Armor Networking Official Blog March 27, 2023

Expanding Cloud Armor DDoS protection to Network Load Balancing and VMs with Public IP addresses - Our Cloud Armor advanced network DDoS protection can provide always-on attack detection and mitigation to defend against volumetric DDoS attacks.

Cloud Armor Networking Official Blog Security March 27, 2023

How Project Shield helped protect U.S. midterm elections from DDoS attacks - Learn how Project Shield powered by Google Cloud protects elections from DDoS attacks.

Cloud Armor Cloud Load Balancing GCP Experience Feb. 27, 2023

The Power of Cloud Load Balancing - Run and scale your services behind a single external IP address, example of redesigning architecture.

Cloud Armor Official Blog Security Feb. 27, 2023

How Google Cloud Armor helps Broadcom block DDoS Attacks - Technology leader Broadcom migrated from AWS to Google Cloud, in part to take advantage of Cloud Armor. Here’s what Cloud Armor does to help secure Broadcom’s systems.

Cloud Armor Cloud Load Balancing Terraform Feb. 13, 2023

How to deploy Google Cloud Armor with HTTP(S) Load Balancer using terraform! - Google Cloud Armor is a network security service that provides defense against DDoS and application attacks. It offers a rich set of WAF….

Cloud Armor Google Kubernetes Engine Kubernetes Security Dec. 26, 2022

Protecting GKE Ingress default backend with Cloud Armor - Learn how to protect the GKE Ingress default backend with Cloud Armor Policies.

Cloud Armor Google Kubernetes Engine Dec. 19, 2022

Nginx ingress and Cloud Armor - Using Cloud Armor in Nginx Ingress.

Cloud Armor Official Blog Nov. 21, 2022

Introducing Cloud Armor features to help improve efficacy: advanced rule tuning and auto deploy - With Cloud Armor’s latest update, customers can customize WAF rules with tuning options that help reduce the number of false positive alerts that may be generated for particularly sensitive applications.

Cloud Armor Official Blog Nov. 14, 2022

When should I use Cloud Armor? - This blog looks at a few examples where Cloud Armor might be a good fit.

Cloud Armor Official Blog Aug. 22, 2022

How Google Cloud blocked the largest Layer 7 DDoS attack at 46 million rps - By anticipating a DDOS attack, a Google Cloud customer was able to stop it before it took down their site. They just weren’t expecting it to be the biggest known Layer 7 DDOS attack so far, at 46 million rps.

Cloud Armor Aug. 15, 2022

Oh Sh*t, I’m Getting Attacked, Now What… - Using Google Cloud Armor to mitigate a denial of service attack.

Cloud Armor Official Blog July 4, 2022

Announcing general availability of Cloud Armor’s new edge security policies, and support for proxy load balancers - Google Cloud expands its scope of DDoS and web application firewall protection with new edge security policies and proxy load balancers.

Cloud Armor Official Blog July 4, 2022

Introducing new Cloud Armor features including rate limiting, adaptive protection, and bot defense - Cloud Armor strengthens its already formidable defenses with new features to counter advanced L7 attacks and block malicious bots.

Cloud Armor Security June 13, 2022

Tutorial 1 : Setup Web Application Security Protection and Detection Lab in Google Cloud-WAF tuning - A four-part series walks you through creating a lab environment for testing against Google cloud WAF’s protections.

Cloud Armor Security Jan. 24, 2022

Implement Cloud Armor Security Policy/s using Terraform - Implementing security policies through Terraform for 'Instance Groups as the backend service' and defining WAF Rules and consuming them through Security Policy.

Cloud Armor Cloud Load Balancing Cloud Run Cloud Storage Jan. 10, 2022

Geofencing a Globally Load Balanced service on GCP using Cloud Armor - Using Cloud Armor to geofence a website/service running on GCP using Cloud Run, Google Cloud Storage and the Global HTTP(S) Load Balancer.

Cloud Armor Jan. 10, 2022

Configure Google Cloud Armor using OpenAPI - A tool for generating Cloud Armor security policies from OpenAPI 3 specifications.

Cloud Armor Dec. 27, 2021

Introduction to Google Cloud Armor part 1 - Policies and rules for WAF and DDoS protection.

Cloud Armor Dec. 27, 2021

Introduction to Google Cloud Armor - Part 2 - Cloud Armor with GKE and filtering the logs.

Cloud Armor Official Blog Dec. 13, 2021

Google Cloud Armor WAF rule to help mitigate CVE-2021-44228 Apache Log4j vulnerability - Cloud Armor WAF rule to help address CVE-2021-44228 Apache Log4j vulnerability.

Cloud Armor Networking Official Blog Oct. 4, 2021

Protect your apps from bots with Cloud Armor and reCAPTCHA Enterprise - Protect your apps from bots with Cloud Armor and reCAPTCHA Enterprise.

Cloud Armor Official Blog July 19, 2021

Cloud Armor: enhancing security at the edge with Adaptive Protection, expanded coverage scope, and new rules - Cloud Armor gets Adaptive Protection, expanded coverage scope, and new rules.

Cloud Armor Official Blog May 17, 2021

Enhance DDoS protection & get predictable pricing with new Cloud Armor service - Protect yourself with the same technology that has protected Google from some of the largest cyber attacks ever reported.

Apigee Cloud Armor Official Blog March 22, 2021

Multi-layer API security with Apigee and Google Cloud Armor - How Apigee X with Google Cloud Armor provides robust API management and multi-layer security.

Cloud Armor Cloud CDN Cloud Load Balancing Networking Official Blog Sept. 28, 2020

Better together: Google Cloud Load Balancing, Cloud CDN, and Google Cloud Armor - By adding Google Cloud Armor and Cloud CDN to your Global Load Balancer deployment, you can benefit from better security and reduced latency.

Cloud Armor Official Blog July 6, 2020

Google Cloud Armor: Introducing 3 key features to protect your websites and applications - Simplifying the way you can use Cloud Armor to help protect your websites and applications.

Cloud Armor Security June 8, 2020

Security Checkpoints for deploying app on GCP - 7 step security guidelines for the application owners, system administrator, and developers wishing to deploy the application on Google Cloud Platform.

Cloud Armor Google Kubernetes Engine Security May 18, 2020

Edge Security with Cloud Armor - Tutorial on how to set up Cloud Armor to secure web app on GKE.

Cloud Armor Official Blog May 18, 2020

New WAF capabilities in Cloud Armor for on-prem and cloud workloads - New web application firewall capabilities are now available in Cloud Armor for workloads on-premise or in the cloud.

Cloud Armor Google Kubernetes Engine Istio Security Feb. 3, 2020

How-To DDOS protection with Google Cloud Armor for GCP GKE Managed Istio Add-on Service - Setting Cloud Armor on Google Kubernetes Engine for DDOS protection.

Cloud Armor Networking Official Blog Security Dec. 2, 2019

Understanding Google Cloud Armor’s new WAF capabilities - New Google Cloud Armor WAF and telemetry features help to protect you from web-based attacks