Bot Detection

[abhiramvadlapat]

We do not want to implement captchas on our clients as they disturb the user experience.

I want to know the ways in which we can mitigate various bot attacks and DDoS attacks through APIGEE Policies.

Also, I have gone through the documentation of APIGEE and have noticed a service called APIGEE sense which helps to analyze and mitigate bot traffic.

We still use the old Edge UI so would love to know how to integrate that into our APIGEE Edge cloud.

Thanks.

[dchiesa1]

Apigee policies cannot mitigate DDoS attacks, or Bots.

You can use a WAF like Google Cloud Armor or Akamai to mitigate these threats.

Also: reCAPTCHA now has a v3 which does not affect the user experience at all. It uses a device fingerprint, rather than a user interaction, to score the bot. You can use reCAPTCHA v3 with Apigee today.

Apigee Sense is the existing bot detection framework offered by Apigee. It has some limitations in that it blocks by IP, which is not as useful with today's smarter bots.