Why Use Cloudflare?
Your site needs increased protection and speed.
The internet in 2019 is not the nice and cozy place it was back in its youth. Every day we observe a huge wave of undesired and/or threatening traffic hitting our websites. Undesired in this context may include:
Aggressive search engine bots - Bing is a repeat offender in my book.
Invasive Search Engine Marketing bots - these bots crawl your site for free, collect marketing and SEO intelligence, and then sell it back to you and your competitors. All of them can place a heavy burden on your server.
Miscellaneous aggressive bots - these range from bona fide research all the way to script kiddies trying to unearth weaknesses on your site.
Script kiddies, actively trying to exploit weaknesses.
Deliberate attacks, ranging in sophistication from trivial to highly advanced.
Meanwhile, real users competing with the bots for server access have high expectations regarding page speed and will increasingly abandon slow loading or unreliable sites.
As Developer Portal experts, we understand that attacks and competition for server access are not isolated to generic websites, Developer Portals are too at risk. As the 'front of house' for your precious APIs, top drawer security for your Developer Portal is not a novel or new idea. Rather, it is a must.
Hosting Platforms Have Drawbacks
While it is advantageous to let a third party handle the hosting of your website, it also removes control over many server layers. Moreover, due to the generic nature of servers in the context of a hosting platform, most malicious requests to your website come all the way through to the application and database backend and therefore, incur a real cost in terms of server load.
What would be nice to have is a protection layer in front of your website that absorbs and neutralizes much of the malicious traffic.
Cloudflare (https://www.cloudflare.com) bills itself as giving your global users a faster, more secure and reliable internet experience. They do this by standing in front of your website, very near to the end-user, and neutralize threats right there at the edge while delivering static content from the edge as well. Plus, they offer a whole host of other services and benefits.
It could be argued that there is an elevated security concern when it comes to your Developer Portal. With the connection to Edge, security and stability are paramount as any kink in this amour could lead to indirect attacks on your environment, and provide access to sensitive data. With this in mind, you could say that Cloudflare shows even more value here than generic websites with the capability of immediately mitigating the risk of attack, and providing a stable foundation on which your Developer Portal can thrive.
We recently worked with a client who had suffered a multi-hour outage due to a malicious attack. We were also seeing hundreds of “fake” user accounts being registered on their site. We put Cloudflare in front of their Acquia-hosted site, and custom configured IP address blocks, web application firewall, speed and cache settings, and page rules to protect and speed up their site.
The results are quite impressive:
Bot traffic is now vastly lower and more controlled, as evident in server logs and server load traces.
The backend is noticeably faster for regular logged-in clients and for admin users. We didn’t bother to quantify this, but many stakeholders brought this up unprompted.
Page speed doubled for anonymous users on the other US coast, as tested via webpagetest.net on a simulated LTE connection.
As a result, stakeholders can now focus on business issues rather than security and stability of the site and visitor engagement is expected to be noticeably better, as has been demonstrated in dozens of other case studies including Amazon’s pioneering one:
Cloudflare has proven its worth time and time again. At Achieve we have recognized the power of this software and look to introduce where possible, necessary and relevant. Our team is expertly trained to implement Cloudflare. Improve the security, stability, and speed of your site, Developer Portal, and platform today.