Joshua Fox

Conf42: Site Reliability Engineering (SRE) 2024

No WAFs: Don’t use a Web Application Firewall, and when you should, anyway

Web Application Firewalls give a false sense of security and add new costs and risk. I’ll tell some stories showing why not to use WAFs, and when you should, anyway. I will use various Cloud Armor to illustrate some use cases of an actually useful WAF.