Bảo vệ API với Cloudflare Secure an API with Cloudflare Secure an API with Cloudflare

API thường bị abuse bởi bots, scrapers, credential stuffing, excessive requests và broken clients. APIs are often abused by bots, scrapers, credential stuffing, excessive requests, and broken clients. APIs are often abused by bots, scrapers, credential stuffing, excessive requests, and broken clients.

Tài liệu Cloudflare (use case) → Official Cloudflare use case docs → Official Cloudflare use case docs →

Kiến trúc gợi ý Suggested architecture Suggested architecture

Mobile/Web Client → Cloudflare API security controls → API origin Mobile/Web Client → Cloudflare API security controls → API origin Mobile/Web Client → Cloudflare API security controls → API origin

Controls & stack Controls & stack Controls & stack

API Shield: discovery endpoint, schema validation, sequence analytics API Shield: endpoint discovery, schema validation, sequence analytics API Shield: endpoint discovery, schema validation, sequence analytics
WAF + managed rules cho pattern phổ biến WAF + managed rules for common patterns WAF + managed rules for common patterns
Rate limiting theo endpoint (login, OTP, search, checkout) Endpoint-based rate limiting (login, OTP, search, checkout) Endpoint-based rate limiting (login, OTP, search, checkout)
Bot protection cho traffic automation xấu Bot protection for harmful automation Bot protection for harmful automation
mTLS/JWT validation cho client và auth endpoints mTLS/JWT validation for clients and auth endpoints mTLS/JWT validation for clients and auth endpoints
Logging/analytics để thấy top paths & top clients Logging/analytics to see top paths & clients Logging/analytics to see top paths & clients

Tình huống khác (cùng lộ trình) Other scenarios (same track) Other scenarios (same track)

← Tất cả tình huống lộ trình này ← All scenarios in this track ← All scenarios in this track · Ba nhóm tình huống All three groups All three groups

Next step Next step Next step

Tiếp tục hành trình học của bạn. Continue your learning journey. Continue your learning journey.

Xem API Shield Explore API Shield Explore API Shield