WAF Mode

Mode Definition

Smart

In this mode, the creoline WAF operates based on signals and a balanced risk management approach. Visitors to the target website are either immediately redirected to the upstream server based on their Internet connection, location, and request information, or—in suspicious cases—are shown a JavaScript proof-of-work challenge page. This mode is suitable for normal website operation.

Strict

In Strict mode, all incoming HTTP requests are immediately redirected to the JavaScript challenge. No request can be forwarded to the upstream server without a proof-of-work, unless explicitly authorized by user-defined rules. This mode is particularly suitable for websites experiencing massive attacks from bots, scrapers, or botnets.

Pass-through

In Pass-through mode, all rules and signals are completely disabled. Incoming HTTP requests are transparently forwarded to the upstream server, and no rule evaluation takes place. This mode is particularly suitable for websites where the creoline WAF is to be activated only temporarily.