Life of a request: Securing your app's traffic with Vercel
Dec 5, 2024

Summary
This post details Vercel's layered security approach for application traffic. It explains the platform-wide Vercel Firewall's multi-layered protection (L3, L4, L7) against DDoS, SYN floods, UDP floods, and HTTP floods. It also describes Deployment Protection for project-level access control (account, password, trusted IPs) and the customizable Web Application Firewall (WAF) with parameters like IP, geolocation, user agent, headers, and actions like logging, challenges, or blocking. It highlights the WAF's ability to enforce persistent actions to block repeat offenders and prevent unnecessary usage costs.