Add Bot Manager Lite to a Firewall

The Bot Manager Lite Integration Kit template provides an easy way to integrate the Bot Manager Lite function in an existing Firewall on Azion. This template automatically creates a new function instance for Bot Manager Lite and a Rules Engine rule to execute it in the selected Firewall.

Requirements

Before deploying this template, you must:

• Have a Firewall created in your account.

  • During the setup of the template, you must inform the ID of your existing Firewall to add the Bot Manager Lite instance. If the ID doesn’t exist, the execution will fail. Check how to configure and edit a Firewall.

• Launch the latest version of the Bot Manager Lite integration.

  • Go to Azion Marketplace to install this integration by clicking the Install button. Check the How to install Azion Bot Manager Lite guide for more details.
  • If you didn’t install the Bot Manager Lite function before deploying this template, the execution will fail and a log explaining the reason will be printed.

• This template uses Functions and it may generate usage-related costs. Check the pricing page for more information.

Deploying the template

You can obtain and configure your template through Azion Console. To easily deploy it at the edge, click the button below.

Setting up the template

In the configuration form, you must provide the information to configure your application. Fill in the presented fields.

Fields identified with an asterisk are mandatory.

• Firewall ID *: the ID of your existing Firewall to add the Bot Manager Lite instance.
  • To get the ID, go to the Firewall page, select the one you want to use, and copy the ID from the URL. You can also get it via Azion API.

After completing all the information, click the Deploy button, located in the bottom-right corner. This will start the deployment process.

You can follow the deployment process through a window showing the logs. When it’s complete, the page shows information about the application and some options to continue your journey.

Now you can manage and adjust the settings through Azion Console.

Key configurations

The template verifies if the account complies with the requirements (if the latest version of Bot Manager Lite is installed, the informed Firewall exists, and the Functions module is enabled) to create a function instance of the Bot Manager Lite and create a Rules Engine rule to execute the function instance.

If it doesn’t comply with any of the requirements, the execution will fail and a log explaining the reason will be printed.

The function instance has the following JSON Args:

{
  "threshold": 10,
  "action": "allow",
  "internal_logs": "2"
}

Where:

• threshold: the maximum score the request can reach before the function takes an action. If it has no value, the function won’t take action. This template sets a default value of 10.
• action: the action to be taken by the function whenever the request’s score is greater or equals the defined threshold. Possible values: allow, custom_html, deny, drop, hold_connection, random_delay, and redirect. This template defaults to allow (observation mode — requests are not blocked).
• internal_logs: controls which requests are logged. Value "2" logs all requests regardless of score, which is recommended during the initial observation phase.

You can calibrate and edit the arguments to better adjust the integration to your needs. Read more on How to manage bots.

Viewing logs

After executing the template, the requests will generate logs that can be seen in Real-Time Events. By analyzing the logs generated by Bot Manager Lite, you can get insights to understand if any changes in the function instance’s JSON Args are needed.

Read more on How to observe and calibrate rules.

You can also use Data Stream to monitor the activity.

Managing the template

All settings can be customized at any time you need through Azion Console. To manage and edit your application’s settings, proceed as follows:

1. Access Azion Console > Applications.

• You’ll be redirected to the Applications page. It lists all the applications you’ve created.

2. Select the application related to this template.

• The list is organized alphabetically. You can also use the search bar located in the upper-left corner of the list; currently, it filters only by Application Name.

After selecting the application you’ll work on, you’ll be directed to a page containing all the settings you can configure.

Adding a custom domain

The application created during the deployment has an assigned Azion Workload domain to make it accessible through the browser. The domain has the following format: xxxxxxxxxx.map.azionedge.net/. However, you can add a custom domain for users to access your application through it.