LogoLogo
  • Welcome
  • Landing in Transparent Edge
  • Sign up process
  • Getting Started
    • Basics concepts
      • Glosary
        • API
        • Brotli Compression
        • Cache-Control
        • Cache key
        • Caching
        • CNAME
        • Cloud Computing
        • Cloud Computing Architecture
        • Cloud Services
        • DASH
        • Data Center
        • Edge Server
        • ETag
        • GSLB
        • HLS (HTTP Live Streaming)
        • HTTP/2
        • Infrastructure as a Service (IaaS)
        • Internet Exchange Point
        • Last-Modified
        • Load Balancing
        • MultiCDN
        • NoSQL (not only SQL)
        • Origin
        • Origin Shield
        • OTT (Over The Top)
        • Platform as a Service (PaaS)
        • PoP (Point of Presence)
        • Private CDN
        • Private Cloud
        • Public Cloud
        • Purge
        • Query String
        • Reverse Proxy
        • RTT (Round-trip Time)
        • SaaS (Software as a Service)
        • SDS (Software Defined Storage)
        • Smooth Streaming
        • Status Code
        • TCP (Transmission Control Protocol)
        • TLS Acceleration
        • TLS (Transport Layer Security)
        • TTFB (Time-to-first-byte)
        • TTL (Time-to-live)
        • Virtual Machine
        • VPS (Virtual Private Server)
        • Web Services
      • Let's start at the beginning
      • Things to consider
      • Houston, we have a problem
      • HTTP, How does it work?
      • Invalidating methods
      • DNS Pointing
      • Log formats
      • Predefined headers
      • Default headers
        • geo_country_code
        • X-Device
        • Vary
        • Cache headers
        • Age
        • TP-Cache
        • True-Client-IP and X-Forwarded-For
      • Forcing No-Cache
      • Architecture
        • Transparent Edge’s IP addresses
        • Locations and PoP
        • Cache layers
      • Cache effectiveness
      • SSL
      • HTTP 5xx Error Codes
      • Features
        • Protection against origin failures
        • Rate Limit
        • Geolocation and geoblocking
        • Prefechting
        • Refetching
        • Fast purging
        • HTTP Redirects
        • Caching static vs. dynamic objects
        • Rewriting of headers
        • Device detection
    • Dashboard
      • Historic
      • Analytics
      • Invalidating content
      • Content invalidation by tags
      • Prefetching Cache
      • Log shipping
      • Provisioning
        • Initial configuration
        • Backends
        • Sites
        • Configuration deployments
        • Network ACLs
        • TLS/SSL Certificates
      • User management
  • Configuration
    • VCL Reference
      • Default Functions
      • VCL Objects
      • Callable Functions
      • Security restrictions
      • Varnish book
    • Network Access Control List
      • Initial configuration
      • Auto generated lists
      • Manage lists via API
    • i3
      • Quality adjustment
      • Cache timing allocation for transformed images
      • Conversion to grayscale
      • Conversion to WebP
      • Blurring
      • Inclusion of graphics in the footer (strip)
      • Automatic resizing
      • Definition of the maximum size (content-length)
    • Transcoding
      • Relaunch or requeue jobs
      • Create a transcode job
      • Get job information
      • Dashboard usage
    • OpenAPI de TransparentCDN
  • Security
    • HTTPS
    • Blocking User-Agent
    • Blocking by IP Address
    • Blocking Requests Geographically
    • Avoiding Hotlinking
    • Bot Mitigation
    • WAF
      • Configuration
      • CAPTCHA
      • Content protected by token
      • Rate limit
    • Anomaly Detection
      • Detection Types
      • Automatic Reactions
      • Detection History
    • Under attack mode
    • Global Whitelists
  • Integrations
    • Wordpress plugin
    • Google Cloud Platform
    • Amazon Web Services
  • GUIDES AND TUTORIALS
    • How to do things
    • Edge Computing
      • ESI Tags
    • Acting on the Query String
    • Working with cookies
    • Making decisions based on HTTP headers
    • Web Application Gateway
    • Configure your servers to send cache headers
    • Caching a version per device
    • True-Client-IP in the origin
    • A/B Testing
    • Routing traffic to different backends
    • JSON Web Tokens
    • Debug codes
    • Streaming logs
    • API
      • Authentication
      • Invalidation
Powered by GitBook
On this page
  • Auto AntiDDoS list
  • Block this IP button
  • Auto Block IPs anomaly reaction
  • Captcha reaction
  • JS Challenge reaction

Was this helpful?

Export as PDF
  1. Configuration
  2. Network Access Control List

Auto generated lists

PreviousInitial configurationNextManage lists via API

Last updated 10 months ago

Was this helpful?

Some services will automatically create network ACLs, these lists will have specific functions which we will explain below.

Auto AntiDDoS list

The AntiDDoS system will generate a list of suspicious IPs and add them to a Network ACL named "ddos_identified_ips".

This list serves an informational purpose only and does not take any further action against the IPs. You can utilize this list as needed.

Block this IP button

In the section, you will find a button "Block this IP" under the "IP address table".

The blocked IPs will be added to a Network ACL named "auto_blacklist". Also a will be created for the IPs in this list.

IPs on this list will be unconditionally blocked unless a TTL is set when blocking the IPs.

Auto Block IPs anomaly reaction

The "" reaction in , automatically blocks an IP if its requests per second exceed the predefined threshold. These IPs are then added to the "auto_blacklist" ACL.

By default, blocked IPs have a TTL of 1 hour, though this can be adjusted when setting the threshold.

Captcha reaction

The "" reaction in , automatically adds an IP to the "auto_captcha" ACL if its requests per second exceed the predefined threshold. These IPs are then required to solve a Captcha puzzle for each request.

By default, Captcha have a TTL of 1 hour, though this can be adjusted when setting the threshold.

JS Challenge reaction

By default, JS Challenge have a TTL of 1 hour, though this can be adjusted when setting the threshold.

The "" reaction in , automatically adds an IP to the "auto_jschallenge" ACL if its requests per second exceed the predefined threshold. These IPs are then required to pass a JS Challenge for each request.

Analytics
Anomaly Detection service
Anomaly Detection service
Anomaly Detection service
deny VCL configuration
Block IP
Captcha
JS Challenge