How to filter out the majority of that bot traffic.

Question

As part of our Azure stack, we are hosting our commercial website on a Debian instance in a specific resource group.

We have pretty strong security on the site itself, via the aios plugin. We do get regular brute force attempts on the website, with varying intensity - the plug-in does a good job of blocking them, but it’s clearly placing unnecessary load on our server.

We’re wondering if there's an extra layer of security we could add at network / server level to filter out the majority of that bot traffic. We had something similar at the site’s previous Cloud host Cloudways, which was extremely effective - I’m sure there is something similar on Azure but would appreciate being pointed in the right direction.

We could also do with installing a Varnish cache on that box to improve performance and efficiency. If you have any guidance on the best way to do that, we’d be grateful.

Answer 1

Azure Front door will be the answer to your porblems enable WAF with Bot protection will help you strengthen your security posture.

https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-policy-configure-bot-protection?pivots=portal

Please "Accept as answer" If this helps :)