Forum Discussion
THE_BLUE
Cirrostratus
CirrostratusAPI security
I have API which can be accessed through internet. I have restrict the access with IP address ( iRule/data group). Also, I have applied client authentication using certificate to be installed on cli...
Daniel_Wolf
MVP
MVPHi THE_BLUE,
instead of iRules & datagroup you could use address lists. But this is just personal flavor (read more here).
Client cert auth is good. Cert management might be cumbersome.
Maybe look at Rate Limiting, check out API Protection with APM. Old but gold video https://www.youtube.com/watch?v=UVcUAjtyYaY
And final hint - apply a WAF policy. Use ASM Signatures to protect your technologie stack from known vulnerabilities. Apply signatures for Server Technologies, like NGINX, JavaScript, etc.
KR,
Daniel
