Getting started with Yandex Smart Web Security

Smart Web Security protects your infrastructure from DDoS attacks and bots at the OSI model's application layer L7.

In a nutshell, the service checks the HTTP requests sent to the protected resource via a Yandex Application Load Balancer virtual host against the rules configured in the security profile.

To protect your web apps from external threats, Smart Web Security also implements a Web Application Firewall (WAF).

Monitor and limit web app loads with the help of Advanced Rate Limiter (ARL).

Depending on the results of the check, the requests are routed to the virtual host, blocked, or sent to Yandex SmartCaptcha for additional verification.

To get started with the service:

• Create a security profile and connect it to an existing virtual host of an L7 load balancer.
• Create a WAF profile and connect it to an existing security profile.
• Create an ARL profile and connect it to an existing security profile.