CloudBleed: Guess What? There was 0-day protection

About CloudBleed If you aren’t familiar with CloudBleed, take a moment to read the following articles to get an understanding how it was found, what happened, and what PII/PCI data was (possibly) ...
Published Feb 27, 2017
Version 1.0
dcsecurity17
security
WebSafe
Carl_Brothers's avatar
Carl_Brothers
Icon for Employee rankEmployee
Feb 27, 2017

Brian, I think one distinction that is missing for some might be where this solution fits in to the original equation.

 

Unprotected -

 

Request: Client >=====> CloudFlare >=====> Origin Web Server

 

Response: Client <=====< CloudFlare <=====< Origin Web Server

 

Protected -

 

Request: Client >=====> CloudFlare >=====> F5 proxy with WebSafe >=====> Origin Web Server

 

Response: Client <=====< CloudFlare <=====< F5 proxy with WebSafe <=====< Origin Web Server

 

HTH