.NET Architecture & System Design Interview Question #166
What is a Web Application Firewall (WAF)?
Security Architecture, Multi-Tenancy & Disaster Recovery Senior Advanced
Quick Interview Answer
A Web Application Firewall inspects and filters HTTP traffic before it reaches an application. It can block or challenge traffic matching known malicious patterns, protocol violations, or configured rules.
Detailed Explanation
A Web Application Firewall inspects and filters HTTP traffic before it reaches an application. It can block or challenge traffic matching known malicious patterns, protocol violations, or configured rules.
A WAF complements secure application development but does not replace input validation, authorization, patching, or safe database access. Rules also require tuning to reduce false positives and maintain effectiveness.
Code Example
Internet
|
WAF
|
Load Balancer
|
Web/API application