traffic flow between IPI, application security policy, bot detection, DoS protection, irule, and geolocation

I found a similiar picture in the labs of F5 Agility 2021 conference. Here: https://clouddocs.f5.com/training/community/waf/html/waf141/waf141.html

Also it can be concluded from reading this: https://support.f5.com/csp/article/K07359270

And since I am used to read from left to right, I adjusted the picture for my convenience.

Attacker on the left, target on the right.