Separating Fraudsters from Legitimate Users with Shape Security and Fastly CDN

Learn how Shape security and Fastly CDN work together to provide speed, control, and security for your most critical web applications!

[@thestefsterbun1820]

So if the user blocks or doesn’t support JavaScript they are refused access to the origin servers?

[@weshales]

No. They don't receive the QuickCheck function at Fastly's edge. Those requests (only important APIs that need protection) will go to Shape's cloud for layer 7 analysis. See this article for details devcentral.f5.com/s/articles/How-to-Setup-Shape-Log-Analysis-in-Fastly?page=1

[@abhaypratap5311]

Is it filter to inspect every request ?

[@weshales]

Only for requests that need protection. This could be a login POST request or a GET request that delivers important data. Any API that is publicly available and being abused by automated requests.

[@Flankymanga]

So basically a cloudflare like service....

[@weshales]

Unfortunately, this service cannot be compared to anything Cloudflare offers. It's a unique solution built specifically by F5 for Fastly. Everything is optimized to provide the most performant and secure experience. Cloudflare only offers basic services around bot protection.

[@eco8gator]

Perfect sales response... bravo!

[@brendawilliams8062]

What is good or bad and then a b0t?

[@eco8gator]

It seems you are implying that all bot considered malicious activity. There are many cases where the intent is to actually buy. Wouldn't blocking automated buying potentially take away from a company's bottom line? Explain what bad user means? (regardless if being a person or a bot that buys). I don't think many vendors give 2 shits who buys from them as long as the thing accessing the site has a payment source.

[@mickeyl3170]

The reason even botters making legit purchases are considered bad users, is because there are too many people complaining about bot's automated to make purchases. This can lead to potentially creating a monopolized purchase of entire stocks where they can create their own resale market, retailers are now trying to prevent bots from making purchases, allowing more regular purchasers where qty limits are more easily enforced. You know. Hypothetically, essentially. I agree, they shouldn't care as long as they are selling out. But apparently they have to upkeep a public image to care about WHO is buying their products and how many. You know. Because capitalism is only good when convenient for those complaining when they can't get what they want.

[@eco8gator]

@@mickeyl3170 they only show that they are trying to address the problem...in reality the CFO loves the bitters because they made the profit and can't turn it around to do something else with it. They also remember the general public in many cases are all talk and when supply is there they don't buy anything anyways. XBox X bricked with little desire from foreign market... suppliers stick with expensive inventiry they can't move and the cheap all talk US public ain't buying anything. They would love for bitters to clear that out...

[@mickeyl3170]

@@eco8gator ya that's why I said they have to "appear to care" even though they really don't.