Unified Web App and API Security for Any Environment
Fastly's Next-Gen WAF offers a highly flexible solution that can protect applications and APIs in various environments including containers, on-premises, cloud, or at the edge. With one integrated solution, Fastly provides comprehensive protection without compromising performance or requiring dedicated headcount. In fact, almost 90% of Fastly customers run the Next-Gen WAF in full blocking mode, highlighting its effectiveness straight out of the box.
Architecture Overview
The Fastly Next-Gen WAF features a hybrid software as a service (SaaS) architecture comprising three main components: Agents, Modules, and Cloud Engine. These components work together seamlessly to ensure high performance and reliability while scaling to protect high-volume applications and APIs without affecting performance. The lightweight agents deployed on existing infrastructure handle detection and decisioning against requests, while the optional modules enforce performance and reliability. The Cloud Engine enriches agents with intelligence gathered from external sources for dynamic, application-specific detections.
Deployment Options
Fastly offers native deployment options for data centers, cloud environments, containers, and serverless applications. Customers can choose from cloud and container-native deployment, data center and legacy application deployment, or edge cloud deployment options. Fastly's ability to deploy in Kubernetes and service mesh environments offers flexibility and scalability, aligning with modern DevOps practices. For legacy applications, customers can opt for installation at the load balancer or API gateway or deploy the agent in reverse proxy mode.
A10 Next-Gen WAF, powered by Fastly
For customers seeking superior on-premise protection, Fastly has partnered with A10 Networks to offer the A10 Next-Gen WAF powered by Fastly. This collaboration combines A10 Thunder ADC's application delivery capabilities with Fastly's advanced security features to provide protection against a wide range of advanced attacks while ensuring service availability and reducing complexity and total cost of ownership.
At the Edge Deployment
The Fastly Next-Gen WAF is also available on the Fastly Edge Cloud Network, enabling customers to enforce security controls closer to users as part of Fastly delivery services. This edge deployment integrates seamlessly with Fastly's caching layer, Varnish, providing both security protection and performance boosts. Ideal for customers who cannot install software on existing infrastructure, the edge deployment option offers world-class performance while shielding origin systems from abusive attack traffic.