# Cloud Armor

> DDoS protection and web security for applications

- **Category**: Cloud
- **Subcategory**: gcp
- **Canonical URL**: https://designpattern.fyi/patterns/gcp_cloud_armor/

---

## Description
Cloud Armor provides DDoS protection and web security for applications behind Cloud Load Balancing. It offers edge security policies, WAF capabilities, IP blacklisting/whitelisting, and pre-configured rules for common threats. Protects against volumetric attacks, protocol attacks, and application layer attacks.


## Use Cases
Use when protecting web applications from DDoS attacks, implementing security policies, or requiring edge security filtering.





## Trade-offs


### Advantages

- DDoS protection at scale

- Integrated with load balancing

- Custom security policies

- Real-time threat visibility




### Considerations & Drawbacks

- Additional service cost

- Rule configuration complexity

- Potential false positives

- Requires ongoing rule maintenance







---
**Reference**: [Original Source](https://cloud.google.com/armor)