Let's talk about proper firewall configuration. Well, it's going to be all about rules. First of all, make sure all I used ports are filtered by your firewall. And for the use ports, make sure that you use a stateful firewall. A stateful firewall will help you to track out of bounds transport layer, and application layer requests. Like for example, some synnex, which are out of band or some HTTP requests, which were not expected by the server.

So using such a firewall will help you to mitigate those attacks at the firewall. And therefore will help your server to save time and resources which is crucial during DDoS attacks. And that firewall, I recommend to actions drop and the low when we will be Talking about other layers of security, like rate controls, there's going to be also another section called monitor. But at this stage, just simple two actions are more than enough. And as per best practices, make sure you're logging everything, this is going to be extremely important during the investigations. The second item, encrypted protocols like HTTPS is a challenge, since you cannot see anything in the traffic, because it is encrypted.

What I mean by that is basically, it is impossible to analyze any HTTP requests. Therefore, your only bet. And the best bet is to try to mitigate HTTPS application layer attacks at the transport layer by limiting the number of let's say SYN requests, for instance, per source or per destination or per combination of those. And finally use blacklisting under whitelisting whichever applies to your needs