-
1 1. Proxy trước WAF/cache — grey-cloud không bảo vệ HTTP. 1. Proxy before WAF/cache — grey-cloud does not protect HTTP. 1. Proxy មុន WAF/cache — grey-cloud មិនការពារ HTTP។
Checkpoint: Checkpoint: Checkpoint៖ Mọi hostname public đã cam trước khi bàn rule. Every public hostname is orange before you debate rules. Hostname សាធារណៈទាំងអស់ត្រូវ orange មុនពេលអ្នកជជែក rule។
-
2 2. Review DNS (MX/TXT/DNSSEC) trước đổi nameserver. 2. Review DNS (MX/TXT/DNSSEC) before changing nameservers. 2. Review DNS (MX/TXT/DNSSEC) មុនប្តូរ nameserver។
-
3 3. Full (strict) khi origin có cert; không Flexible nếu origin HTTPS-only. 3. Full (strict) when origin has a cert; no Flexible if origin is HTTPS-only. 3. Full (strict) ពេល origin មាន cert; កុំ Flexible ប្រសិនបើ origin គឺ HTTPS-only។
-
4 4. Lockdown origin (IP allowlist hoặc AOP) — WAF vô nghĩa nếu bypass IP. 4. Lock down origin (IP allowlist or AOP) — WAF is meaningless if IPs bypass it. 4. Lock down origin (IP allowlist ឬ AOP) — WAF គ្មានន័យប្រសិនបើ IP bypass វា។
-
5 5. Log/simulate rồi Block — WAF, rate limit, bot. 5. Log/simulate then Block — WAF, rate limit, bot. 5. Log/simulate បន្ទាប់មក Block — WAF, rate limit, bot។
-
6 6. Không cache HTML session; bypass /admin /checkout. 6. Do not cache session HTML; bypass /admin /checkout. 6. កុំ cache session HTML; bypass /admin /checkout។
-
7 7. Rate limit path nhạy cảm với ngưỡng có chủ đích (bắt đầu 10/phút/IP trên /login). 7. Rate-limit sensitive paths with a deliberate threshold (start at 10/min/IP on /login). 7. Rate-limit path រសើបជាមួយ threshold ដែលចេតនា (ចាប់ផ្តើម 10/min/IP លើ /login)។
-
8 8. Đo hit ratio và Security Events trước khi khoe tối ưu. 8. Measure hit ratio and Security Events before celebrating optimizations. 8. វាស់ hit ratio និង Security Events មុនអបអរសាទរ optimization។
-
9 9. API Shield / LB / Waiting Room sau nền — đúng use case và plan. 9. API Shield / LB / Waiting Room after the spine — right use case and plan. 9. API Shield / LB / Waiting Room បន្ទាប់ពី spine — use case និង plan ត្រឹមត្រូវ។
-
10 10. Một thay đổi mỗi lần, có rollback (NS cũ, rule disable, purge). 10. One change at a time, with rollback (old NS, disable rule, purge). 10. ការផ្លាស់ប្តូរមួយក្នុងមួយពេល, ជាមួយ rollback (NS ចាស់, disable rule, purge)។
