Protecting your app (and wallet) against malicious traffic
Aug 2, 2024

Summary
This post details how Vercel's Firewall can be configured with custom rules to block or challenge suspicious traffic based on IP addresses, JA4 fingerprints, and other criteria. It introduces Attack Challenge Mode as a temporary measure to investigate traffic spikes. The post also highlights real-time usage and spend controls, including setting spend limits and automatic app pausing. Code optimizations like enabling Fluid compute and transformation-based image optimization are recommended to reduce function and image processing costs. Moving large media files to Vercel Blob storage is suggested for cost-effective asset management. Finally, it reiterates the importance of default deployment protection for securing applications.