What is Cloud Armor?
Cloud Armor is Google’s DDoS protection and Web Application Firewall service. It sits at Google’s global edge network and blocks attacks before they reach your applications. The service protects against volumetric DDoS attacks and application layer attacks.
Core Features
- DDoS protection at Google’s edge network (200+ points of presence)
- Web Application Firewall with OWASP Top 10 rules
- Adaptive Protection with ML-based attack detection
- Bot management and reCAPTCHA Enterprise integration
- Geo-based access control and IP allow/deny lists
Typical Use Cases
E-commerce Protection: Securing online shops against DDoS attacks during sales events and protection from automated bot attacks.
API Security: Rate limiting and WAF rules for public APIs to protect against abuse and exploitation.
Compliance Requirements: Meeting PCI DSS and other standards through application layer firewall rules.
Benefits
- Protection through Google’s global network with 200+ PoPs
- No changes to application architecture required
- Automatic scaling for attacks of any size
- Integrated logging and monitoring
Integration with innFactory
As a Google Cloud partner, innFactory supports you with Cloud Armor: architecture, migration, operations, and cost optimization.
Available Tiers & Options
Standard
- Basic DDoS protection
- Simple IP rules
- No WAF rules
Plus
- Full WAF
- Adaptive Protection
- Bot management
- Higher costs
Typical Use Cases
Technical Specifications
Frequently Asked Questions
What is Cloud Armor?
Cloud Armor is a DDoS protection and WAF service that protects applications at Google's edge network before attacks reach your infrastructure.
How does Adaptive Protection work?
Adaptive Protection uses machine learning to detect attack patterns and automatically suggest defense rules that you can activate with one click.
Which WAF rule sets are available?
Cloud Armor offers preconfigured OWASP Top 10 rules, SQL injection protection, XSS prevention, and custom rules with CEL syntax.
Which backend services are supported?
Cloud Armor protects HTTP(S) Load Balancer, Cloud CDN, Cloud Run, GKE, and external backend services.
