diff --git a/documentation/waap/waap-policies/protocol-validation.md b/documentation/waap/waap-policies/protocol-validation.md index 1bf1537d..410b6f43 100644 --- a/documentation/waap/waap-policies/protocol-validation.md +++ b/documentation/waap/waap-policies/protocol-validation.md @@ -4,7 +4,6 @@ displayName: Protocol validation published: true order: 10 toc: - --1--Protocols overview: "protocols-overview" --1--Configure policy group: "configure-policy-group" --2--Invalid or unknown user agent: "invalid-user-agent-and-unknown-user-agent" --2--Service protocol validation: "service-protocol-validation" @@ -16,57 +15,6 @@ pageDescription: Learn how to enable and customize Protocol validation policy. The protocol validation policy group verifies the HTTP and HTTPS protocols used by clients to request content from your website's origin server. If the request meets the protocol-specific requirements, the transaction is allowed, while all non-compliant transactions are blocked. -## Protocols overview - -Clients use HTTP methods to communicate with the website's origin server and specify what action should be performed on the requested resource. The following are nine standard HTTP methods that Gcore WAAP looks for when validating traffic. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NameDescription
GETRetrieve a URI.
HEADRetrieve a URI without the response body.
POSTSubmit data to a resource and create a new entity.
PUTUpdate all data in a resource entity.
DELETERemove a resource.
CONNECTEstablish a connection with a resource.
OPTIONSRequest information on the communication options associated with a resource.
TRACEEcho a request back to the client (mainly for debugging purposes).
PATCHUpdate data in a resource entity.
- ## Configure policy group You can review the Protocol validation policy group and enable or disable its policies in the Gcore Customer Portal: @@ -127,4 +75,4 @@ Block clients that try to interfere with the service's internal calls, such as t ### Prevent malformed request methods -Enforce HTTP RFC requirements that define how the client is supposed to interact with the server. If the requests don’t meet the RFC standards, the client will be challenged with CAPTCHA or JavaScript validation. Clients that fail to pass the validation will be blocked. \ No newline at end of file +Enforce HTTP RFC requirements that define how the client is supposed to interact with the server. If the requests don’t meet the RFC standards, the client will be challenged with CAPTCHA or JavaScript validation. Clients that fail to pass the validation will be blocked.