Cloud Armor

GCPNetworking

Edge DDoS protection and web application firewall with managed rule sets for OWASP Top 10, adaptive bot protection, and reCAPTCHA Enterprise integration

Jurisdictional exposure

Provider HQ
USMountain View, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations
APACCNEEAEUUKUSOther44 regions across 7 jurisdictions
Sovereign option
Yes — 2 sovereign-flagged regions available

Attributes

Ddos Protection
Yes
Owasp Rules
Yes
Rate Limiting
Yes

Sub-services (2)

Security Policies

Custom rules for filtering incoming traffic

Adaptive Protection

ML-based automatic threat detection and response

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

44 regions
28 countries
2sovereign
Sovereign regions (2)
  • T-Systems Sovereign Cloud · FrankfurtT-Systems Sovereign Cloud powered by Google Cloud
  • S3NS Sovereign Cloud · ParisS3NS — Google Cloud + Thales joint venture
Commercial regions (42)

Europe (13)

  • Belgium
  • Finland
  • Paris
  • Berlin
  • Frankfurt
  • Milan
  • Turin
  • Netherlands
  • Warsaw
  • Madrid
  • Stockholm
  • Zurich
  • London

North America (12)

  • Montréal
  • Toronto
  • Querétaro
  • Northern Virginia
  • Columbus
  • Iowa
  • Dallas
  • Las Vegas
  • Los Angeles
  • South Carolina
  • Salt Lake City
  • Oregon

South America (2)

  • São Paulo
  • Santiago

Asia (9)

  • Hong Kong
  • Delhi
  • Mumbai
  • Jakarta
  • Osaka
  • Tokyo
  • Singapore
  • Seoul
  • Taiwan

Oceania (2)

  • Melbourne
  • Sydney

Middle East (3)

  • Tel Aviv
  • Doha
  • Dammam

Africa (1)

  • Johannesburg

Tags

Equivalent services on other platforms

Alibaba Server Load BalancerAlibaba

Managed L4 (NLB) and L7 (ALB) load balancers with HTTP/3 and QUIC support, health checks, TLS termination, weighted forwarding, geo-aware routing, and integration with Alibaba's Anti-DDoS and WAF

Alibaba Web Application FirewallAlibaba

Managed WAF protecting web apps from OWASP Top 10 attacks, bot traffic, API abuse, and data scraping, with global and China regional deployment, custom rule engine, and unified consoles across Anti-DDoS and Security Center

Elastic Load BalancingAWS

Distribute incoming traffic across multiple targets with four load balancer types: Application (L7), Network (L4), Gateway (inline appliances), and Classic (legacy)

AWS Global AcceleratorAWS

Anycast network layer that routes client traffic to the nearest AWS edge and across the AWS global backbone to healthy endpoints in multiple regions, with two static anycast IPs, automatic failover, TCP and UDP support, and DDoS protection via Shield Standard

AWS Network FirewallAWS

Managed stateful firewall, IDS/IPS, and TLS inspection service deployed as VPC endpoints with Suricata-compatible rule syntax, AWS Managed Threat Signatures rule groups, and centralised deployment via AWS Firewall Manager across Organizations

AWS WAFAWS

Web application firewall that protects against common exploits with managed rule groups, custom rules, rate-based rules, Bot Control, and CAPTCHA challenges

AWS ShieldAWS

Managed DDoS protection service with always-on Standard tier for CloudFront and Route 53 edge, and Advanced tier adding 24/7 DDoS Response Team access, cost protection, and enhanced Layer 7 detection

Azure Application GatewayAzure

Layer 7 load balancer with integrated web application firewall, SSL termination, URL-based routing, cookie-based session affinity, and autoscaling based on traffic

Azure FirewallAzure

Cloud-native, stateful firewall-as-a-service with built-in high availability, unrestricted scale, threat intelligence-based filtering, and centralised policy

Azure DDoS ProtectionAzure

Managed Distributed Denial-of-Service protection for Azure resources with always-on traffic monitoring, adaptive real-time tuning, cost-guarantee protection against scale-out attacks, and integration with Azure Monitor for attack analytics and telemetry

Brightbox Load BalancersBrightbox

Managed HTTP/HTTPS/TCP load balancers with SSL termination, health checks, and zero-downtime backend rotation

Civo Load BalancerCivo

Managed L4/L7 load balancers fronting Civo Compute and Kubernetes workloads with health checks, sticky sessions, and TLS termination

Cleura Load BalancerCleura

OpenStack-Octavia managed load balancer for Cleura Compute and Kubernetes workloads. Layer-4 and layer-7 balancing, health checks, TLS termination, and integration with Neutron floating IPs.

Cloudflare Load BalancingCloudflare

Global DNS and anycast-based traffic load balancing across pools of origins with weighted, geo-steering, random, proximity, and least-outstanding-requests policies plus active health checks and automatic failover

Cloudflare Magic TransitCloudflare

L3 DDoS scrubbing and IP transit for enterprise data centres — BGP advertises customer prefixes from Cloudflare's edge, clean traffic flows back via GRE / IPsec / private peering. Sub-3-second time-to-mitigation with no rerouting on the customer side.

Cloudflare Bot ManagementCloudflare

Machine-learning bot classification at the edge — scores every request 1-99 and exposes that to WAF rules. Distinguishes search-engine crawlers, scrapers, credential-stuffing tools, and headless browsers without breaking legitimate automation.

Cloudflare API ShieldCloudflare

API-specific security layer — schema validation, mTLS client authentication, rate-limiting per JWT subject, sensitive-data detection in responses, and API discovery / inventory that auto-surfaces unknown endpoints.

Cloudflare WAFCloudflare

L7 web application firewall protecting against OWASP Top 10 risks with Cloudflare-managed rule sets, custom expression-based rules, exposed-credentials detection, rate-limiting integration, and machine-learning attack-score signals tuned across the global traffic graph

Cloud Temple Anti-DDoSCloud Temple

Volumetric and application-layer DDoS protection for services hosted on Cloud Temple, with sub-second detection and automated mitigation across the SecNumCloud-qualified perimeter

Gcore Load BalancerGcore

Managed L4 and L7 load balancing with TLS termination, health checks, sticky sessions, and integration with Gcore's compute and managed Kubernetes

Gcore DDoS ProtectionGcore

Always-on L3/L4/L7 DDoS mitigation delivered at Gcore's edge POPs, with traffic scrubbing, capacity in the multi-Tbps range, and SLAs against volumetric and application-layer attacks

Gcore WAAPGcore

Web application and API protection with OWASP rule sets, bot management, API schema enforcement, and rate limiting — delivered at the CDN edge with a single configuration surface

Hetzner Load BalancerHetzner

Managed L4/L7 load balancers with health checks, sticky sessions, and managed certificate provisioning

Huawei Web Application FirewallHuawei

Managed web application firewall with OWASP Top 10 rule sets, bot management, anti-crawler, CC (challenge-collapsar) attack mitigation, custom rule engine, and regional deployment with integrated DDoS protection

Huawei Elastic Load BalanceHuawei

Managed L4 and L7 load balancing with shared and dedicated instance types, HTTP/HTTPS/TCP/UDP listeners, cross-zone forwarding, health checks, TLS termination, and integration with WAF and Anti-DDoS

IBM Cloud Internet ServicesIBM

Edge delivery and security bundle powered by Cloudflare, offering DNS, global load balancing, WAF, DDoS protection, CDN, rate limiting, and Page Rules through a single IBM Cloud-native control plane

Network Load BalancerIONOS

Layer 4 network load balancer for high-throughput applications in EU datacentres

IONOS Application Load BalancerIONOS

Layer-7 load balancer with HTTP/HTTPS path-based routing, SSL termination, sticky sessions, and integration with Compute Engine and Managed Kubernetes target pools

IONOS DDoS ProtectionIONOS

Always-on volumetric and protocol-level DDoS mitigation at the network edge, with automatic detection and scrubbing for L3/L4 attacks targeting Compute Engine, Load Balancer, and Public IP resources

Load BalancerKakao

Layer 4 (network) and Layer 7 (application) load balancers with health checks, SSL termination, and integration with WAF

NumSpot Load BalancerNumSpot

Managed load balancer for NumSpot Compute and Kubernetes workloads. Layer-4 and layer-7 balancing, health checks, TLS termination with sovereign key management, and integration with NumSpot public IPs.

OpenStack OctaviaOpenStack

Load Balancer as a Service powered by HAProxy (or a vendor backend), with TLS termination, L4/L7 routing, autoscaling pools, and amphora-based active/standby high availability — the OpenStack equivalent of ELB / Azure Load Balancer / Cloud Load Balancing

OCI Load BalancerOracle

Managed load balancing with both L7 HTTP/HTTPS flavour (Flexible Load Balancer with SSL offload, WAF integration, path-based routing) and L4 Network Load Balancer (UDP, TCP, ultra-low-latency) across OCI regions with auto-scaling bandwidth

OCI Web Application FirewallOracle

Layer-7 protection against OWASP Top 10 attacks (SQLi, XSS, RCE), bot traffic, and DDoS at the application layer. Edge-deployed for global protection or regional for backend-fronted apps.

Elastic Load BalancingT Cloud

Managed L4 and L7 load balancers — TCP/UDP passthrough, HTTP/HTTPS with path-based routing, TLS termination with managed certificates, sticky sessions, and cross-AZ health checks

Web Application FirewallT Cloud

L7 web application firewall protecting against OWASP Top 10 risks — SQL injection, XSS, command injection — with managed rule sets, custom rules, IP allow/block lists, and bot-detection heuristics tuned for OTC-hosted apps

Outscale Load Balancer (LBU)Outscale

Load-Balancing Unit — L4/L7 load balancer with health checks, sticky sessions, TLS termination, and AWS ELB-compatible API. Internet-facing or internal-only modes; HTTP/HTTPS/TCP/UDP protocols.

OVHcloud Public Cloud Load BalancerOVHcloud

Layer-4 and Layer-7 managed load balancer for Public Cloud Instances and Managed Kubernetes, with HTTP/HTTPS path routing, SSL termination, and cross-zone health checks

Scaleway Load BalancerScaleway

Managed L4 and L7 load balancer with health checks, SSL termination, sticky sessions, and integration with Instances and Kubernetes Kapsule target pools

STACKIT Load BalancerSTACKIT

Managed L4/L7 load balancers with TLS termination, health checks, and integration with STACKIT compute and SKE — fully GDPR-resident in Germany

STACKIT Application Load BalancerSTACKIT

Layer-7 load balancer with HTTP/HTTPS path-based routing, SSL termination, and integration with Compute Engine and Kubernetes Engine target pools — distinct from the L4 STACKIT Load Balancer

Tencent Cloud Load BalancerTencent

Managed L4 and L7 load balancing with internet-facing and internal variants, HTTP/HTTPS/TCP/UDP/QUIC listeners, WebSocket support, session persistence, configurable health checks, and automatic integration with TCR and CKafka origins

UpCloud Managed Load BalancerUpCloud

Layer 4 / Layer 7 managed load balancer with automated failover across UpCloud zones and managed certificate provisioning

Pricing

Pricing model:pay-as-you-go