DOCSEARCHbyAlgolia
Submit Docs

Haltdos Documentation

website·Indexed 33 days ago

https://docs.haltdos.com/introduction

Documentation for Haltdos v8, featuring a Web Application Firewall (WAF) with GraphQL, XML, and Web security policies, DDoS detection and mitigation, and the Haltdos Ingress Controller for Kubernetes. Includes guides on load balancing, geo-filtering, API integration, and centralized cluster deployment.

Tokens
446.2K
Snippets
990
Records
3.7K
Agent score
59%

What's inside Haltdos

  1. Overview of WAF Health Check Monitoring

    WAF Monitoring allows you to continually test upstream servers to ensure they are healthy. If a server fails health checks, WAF avoids sending client requests to it. Once the server recovers and passes the required number of checks, it is gracefully added back into the server group.

    Monitors can be applied at two levels:

    1. Server Group Level: The monitor is applied to all servers within the group automatically.
    2. Individual Server Level: A monitor attached to a specific server overrides the server-group monitor configuration.

  2. Overview of Haltdos Remote Access Gateway

    v7
    Haltdos Remote Access Gateway is a virtual private network (VPN) solution that utilizes SSL/TLS protocols to provide secure remote access via standard web browsers. It employs end-to-end encryption (E2EE) to protect data transmitted between the endpoint device client software and the SSL VPN server, allowing any device with an internet connection to establish a secure connection.

  3. Overview of Haltdos DHCP Configuration

    v7
    Haltdos v7 implements the Dynamic Host Configuration Protocol (DHCP) to automatically assign IP addresses and communication parameters to devices on an IP network. DHCP configuration in Haltdos is divided into two primary areas: Networks and Settings.

  4. Introduction to Haltdos WAF Professional Edition (PE)

    Haltdos WAF Professional Edition (PE) is a user-friendly Web Application Firewall designed to protect websites and APIs from web-based attacks. It specifically guards against the OWASP Top 10 threats, including Cross-Site Scripting (XSS) and SQL injection, helping organizations prevent fraud and data breaches for e-commerce sites, financial services, and other client-facing web products.

  5. Overview of Haltdos WAF capabilities

    Haltdos WAF (Web Application Firewall/WAAP) is a reverse proxy solution that protects web applications by filtering and monitoring HTTP traffic (specifically GET and POST requests) between the application and the Internet. It protects against application-layer attacks including SQL-Injection, Cross-Site Scripting (XSS), Session Hijacking, and OWASP top 10 vulnerabilities.

  6. Overview of Haltdos TCP CRD

    The TCP Custom Resource (CRD) extends the Kubernetes API to enable Layer 4 (TCP) load balancing via the Haltdos Ingress Controller. It is designed for protocol-agnostic workloads such as databases, message queues, and legacy applications, allowing administrators to define how raw TCP traffic is routed, secured, and monitored using declarative configuration.

  7. Overview of Haltdos DNS capabilities

    v7

    Haltdos DNS is a cloud-based, IPv6-compliant Domain Name System (DNS) service designed to route end users to internet applications by resolving domain names into IP addresses. It utilizes a global AnyCast network to ensure high availability and low latency. Key features include:

    • Fast Resolution: DNS lookups are served from the closest Point of Presence (PoP).
    • Intelligent Routing: Traffic is routed via a global anycast network to the most optimal DNS server.
    • Near Real-Time Updates: DNS record changes are propagated across all PoPs within seconds, facilitating rapid migrations and failover actions.

  8. Overview of Haltdos DNS capabilities

    v6

    Haltdos DNS is a scalable, cloud-based Domain Name System (DNS) service that translates domain names (e.g., www.example.com) into IP addresses. It is fully compliant with IPv6 and utilizes a global AnyCast network to ensure high availability and low latency. Key features include:

    • Fast Resolution: DNS lookups are served from the closest Point of Presence (PoP).
    • Intelligent Routing: Traffic is routed via a global anycast network to the most optimal DNS server.
    • Near Real-Time Propagation: DNS record changes are pushed across all PoPs within seconds, facilitating rapid migrations and failover actions.

  9. Overview of Haltdos Platform Stack Settings

    v6
    Stack settings in Haltdos Platform (v6) allow users to configure advanced platform options, including integrations with third-party solutions (such as Backup, Syslog servers, and AAA), customization of dashboards and reports, and the generation of API tokens for API-driven solution management.

  10. Overview of Haltdos WAF capabilities

    v7
    Haltdos WAF (Web Application Firewall/WAAP) is a reverse proxy solution that filters and monitors HTTP traffic (specifically GET and POST requests) between a web application and the internet. It protects against application layer attacks such as SQL-Injection, Cross-Site Scripting (XSS), Session Hijacking, and OWASP top 10 vulnerabilities. It operates using a combination of whitelisting (deny all by default, allow trusted) and blacklisting (allow by default, block known malicious signatures).

  11. Overview of Haltdos WAF Custom Rules

    v6

    Haltdos WAF allows users to create custom rules to augment the platform-managed rule set (which covers OWASP Top 10, CMS-specific threats, and CVEs). Custom rules are evaluated for every request and hold a higher priority than managed rules. Each custom rule consists of a rule name, a priority level, and an array of matching conditions that trigger a specified action.

    Custom rules support compounding logic:

    • Conditions within the same rule are compounded using 'AND' (e.g., block a specific IP AND a specific browser).
    • Advanced rules can use complex logic such as '(Condition 1 AND Condition 2) OR Condition 3'.

  12. Overview of Haltdos VPN Security Policy

    The Security Policy is a gate that validates a device's security posture (OS and antivirus status) before allowing it to connect to the VPN network. This prevents compromised, outdated, or unprotected devices from connecting, even if the user has valid credentials. When a user connects via the Haltdos RAG Client, the client collects device telemetry (OS version, update status, antivirus status) and sends it to the VPN server for validation against the configured policy.