About This Architecture
Multi-layer defense architecture with internet traffic first filtered by a DDoS Shield (L3/L4), then inspected by a WAF with L7 rules, rate-limited, cached at a CDN edge, and load-balanced across multiple application servers.
WAF + DDoS Protection
Multi-layer defense architecture with internet traffic first filtered by a DDoS Shield (L3/L4), then inspected by a WAF with L7 rules, rate-limited, cached at a CDN edge, and load-balanced across multiple application servers.
general · architecture diagram.
Multi-layer defense architecture with internet traffic first filtered by a DDoS Shield (L3/L4), then inspected by a WAF with L7 rules, rate-limited, cached at a CDN edge, and load-balanced across multiple application servers.
Created by
February 8, 2026
Updated
February 13, 2026 at 5:47 PM
Type
architecture
Describe your architecture in plain English and get a production-ready Draw.io diagram in seconds. Works for AWS, Azure, GCP, Kubernetes, and more.