Overview
The BotGuard GateKeeper is an all-in-one web app protection that safeguards your business from the full range of automated attacks and eliminates bad bot induced traffic. This state of the art, cloud-based, solution allows you to block bots, hackers and spam and grant unrestricted access for human users, search engines or affiliate automation tools to your website. Bots are at our core, but we offer much more. Our solution is an advanced reverse proxy that allows you to manage your inbound web traffic, protect your website from DDoS attacks and scale up your website without interruptions.
With our solution you'll be able to distribute network traffic across a number of web servers and increase both processing speeds and server capacity effectiveness. Mitigate traffic spikes that occur during atypical activity, like DDoS attacks, and assure that you can prevent any single server from overloading.
With the GateKeeper in place, the website doesn't reveal its origin server real IP address, making it harder for attackers to leverage targeted attacks against them as they will only be able to find that instance which has tighter security and additional resources to fight them. When using multiple instances of the GateKeeper, some of them may be hidden from attackers and left for legitimate visitors to use.
As our solution limits the number of concurrent connections and the request rate on a per-client basis, it helps to prevent website abuse and targeted server overload like the ones in a DDoS attack. In more complex cases, where a cluster is used, the attacker addresses are propagated throughout the cluster and filtered at the network stack of the operating system.
SSL operations are CPU intensive and can limit the server resources. With SSL offloading that process moves to the GateKeeper and frees up the web server. Our solution supports TLS 1.3 cryptographic and HTTP/3 (QUIC) protocols, being that in the first case it speeds up encrypted connections even more with TLS false start and Zero Round Trip Time (0-RTT) and the second has beer transmission speed, shorter loading times and a stabler connection for mobile users. All necessary security settings are included by default and our solution issues and renews all certificates automatically. Websites protected by the BotGuard GateKeeper receive an A+ rating from Qualys SSL Labs.
Highlights
- Complete website protection: The GateKeeper supports all of BotGuard's protection services, such as the Web Application Firewall (WAF) and Vulnerability Scans Protection, and helps you mitigate DDoS attacks.
- SSL Certificates Management: The GateKeeper issues and renews all certificates automatically. All necessary security settings are included by default. Websites protected by the BotGuard GateKeeper receive an A+ rating from Qualys SSL Labs.
- Modern Protocols and Algorithms: Our solution supports both TLS 1.3 cryptographic protocol and HTTP/3 (QUIC) protocol. In the first case, it speeds up encrypted connections even more with TLS false start and Zero Round Trip Time (0-RTT). HTTP/3 has better transmission speed, shorter loading times and a stabler connection for mobile users.
Details
Typical total price
$0.046/hour
Features and programs
Financing for AWS Marketplace purchases
Pricing
- ...
Instance type | Product cost/hour | EC2 cost/hour | Total/hour |
---|---|---|---|
t2.nano | $0.00 | $0.006 | $0.006 |
t2.micro AWS Free Tier | $0.00 | $0.012 | $0.012 |
t2.small | $0.00 | $0.023 | $0.023 |
t2.medium Recommended | $0.00 | $0.046 | $0.046 |
t2.large | $0.00 | $0.093 | $0.093 |
t2.xlarge | $0.00 | $0.186 | $0.186 |
t2.2xlarge | $0.00 | $0.371 | $0.371 |
t3.nano | $0.00 | $0.005 | $0.005 |
t3.micro AWS Free Tier | $0.00 | $0.01 | $0.01 |
t3.small | $0.00 | $0.021 | $0.021 |
Additional AWS infrastructure costs
Type | Cost |
---|---|
EBS General Purpose SSD (gp3) volumes | $0.08/per GB/month of provisioned storage |
Vendor refund policy
BotGuard monitoring mode (non-blocking mode) is free of charge for an unlimited time. Any additional purchased subscription is non-refundable, but can be cancelled at any time without any further commitment. Downgrades are not supported. Please contact the BotGuard 24/7 support service for more information.
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
1.4.3 LB API add website bugfix, prevent certificate issuing for invalid websites 1.4.2 Implemented LB API mTLS auth, first boot initialization scripts updated, fixed website apply config on edit issue, fixed "nginx: [emerg] no servers are inside upstream" issue 1.4.1 SSH config issue on uninstall resolved, embedded terminal issue on first login resolved, added wildcard subdomain support 1.4.0 GateKeeper API server and a lot of performance improvements 1.3.3 SSL certificate management improvements, Debian updated to 12.6 (CVE-2024-6387 fixed), High CPU usage issue fixed 1.3.2 Nginx 1.27.0 1.3.1 BotGuard nginx module updated to 1.4.2 1.3.0 Transparent JavaScript challenges are supported, TCP BBR optimization applied, Nginx updated to 1.25.5, OpenSSL updated to 3.0.13, ZSTD compression support added, UI bug fixes 1.2.2 Fixed issue with Apache HTTP2 upstreams ("Safari can't open the page xxx because the server unexpectedly dropped the connection") 1.2.1 Debian 12.2.0, Nginx 1.25.2, added upstream patch for CVE-2023-44487 1.2.0 Debian 12, Nginx 1.25.1, OpenSSL 3.0.9. Optimized rate limits 1.1.6 Nginx 1.25.0, switch to 1.1.1.1 dns resolver by default (8.8.8.8 has limits) 1.1.3 Nginx 1.23.3 (mainline), OCSP stapling fixes, cache optimization 1.1.2 Fix for SSL upstreams with SNI, display number of blocked IP addresses in dashboard 1.1.1 Optimized Nginx performance 1.1.0 External Redis support for clustering purposes, tuning limits 1.0.2 OpenSSL upgraded to 3.0.7 version with security bugfix 1.0.1 Nginx settings tune and logrotate fix 1.0.0 Initial release
Additional details
Usage instructions
Getting started
The configuration of BotGuard GateKeeper is simple, fast and straightforward. Everything is taken care of via browser.
As a prerequisite, you'll need an API key, which can be found at your BotGuard dashboard.
Type the IP address of your GateKeeper instance in browser address bar: http://gatekeeper_public_ipv4 and hit Enter. The web application will ask you to enter your BotGuard API key or register a new BotGuard account to get one. The API key would be used as a password for further GateKeeper management.
After entering a valid API key, the page will refresh and prompt you to enter the username and password. Please use 'botguard' as the username and your API key as the password.
Domain setup
- Select Domains in the top menu
- Click Add domain button
- Enter your web application domain name and add the subdomains, if they exist
- Define your application servers IP addresses in the Upstreams section. BotGuard GateKeeper will try to guess your upstream addresses based on the domain DNS records
- Select SSL certificate provider or upload your own certificate
- Select additional caching and security settings and save the changes. Don't forget to enable BotGuard bot protection!
- Point your domain A and/or AAAA records to the BotGuard GateKeeper instance IP address
Resources
Support
Vendor support
Tickets: https://botguard.net/en/support Email: support@botguard.net 24/7
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.