Bypassing CDN WAFs with alternate domain routing
Guest Post: How to mitigate an attack that can bypass security features of shared CDNs.
| CARVIEW |
Select Language
HTTP/2 200
date: Mon, 14 Jul 2025 19:53:06 GMT
content-type: text/html; charset=UTF-8
content-length: 36785
x-xss-protection: 1; mode=block
referrer-policy: no-referrer, same-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.apnic.net
cf-edge-cache: cache,platform=wordpress
link: ; rel="alternate"; title="JSON"; type="application/json"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2219
strict-transport-security: max-age=15552000; preload
last-modified: Mon, 14 Jul 2025 19:53:06 GMT
cf-cache-status: EXPIRED
expires: Mon, 14 Jul 2025 20:53:06 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
access-control-allow-headers: cache-control, pragma, user-agent
access-control-allow-methods: GET, OPTIONS
server: cloudflare
cf-ray: 95f390665c0f8087-BLR
Ryan Gerstenkorn, Author at APNIC Blog
Skip to content
