GuideReference
TrainingSupportCommunity

enhanced_​proxy_​detection


Enhanced Proxy Detection (EPD) leverages the Geo​Guard service provided by Geo​Comply to add proxy detection and location spoofing protection. It identifies requests for your content that have been redirected from an unwanted source through a proxy. You can then allow, deny, or redirect these requests.

Include this behavior in the same rule as epd​_forward​_header​_enrichment. The epd​Forward​Header​Enrichment behavior sends the Enhanced Proxy Detection (Akamai-EPD) header in the forward request to determine whether the connecting IP address is an anonymous proxy.

OptionTypeDescriptionRequires
enabledboolean

Applies Geo​Guard proxy detection.

{"displayType":"boolean","tag":"input","type":"checkbox"}
forward_​header_​enrichmentboolean

Whether the Enhanced Proxy Detection (Akamai-EPD) header is included in the forward request to mark a connecting IP address as an anonymous proxy, with a two-letter designation. See the epd​_forward​_header​_enrichment behavior for details.

{"displayType":"boolean","tag":"input","type":"checkbox"}
{"if":{"attribute":"enabled","op":"eq","value":true}}
enable_​configuration_​modeenum

Specifies how to field the proxy request.

{"displayType":"enum","options":["BEST_PRACTICE","ADVANCED"],"tag":"select"}
{"if":{"attribute":"enabled","op":"eq","value":true}}
BEST_​PRACTICE

Geo​Comply maintains a fixed list of categories for their Geo​Guard service. Select this mode to automatically apply their primary, "must-have" categories for proxy detection.

ADVANCED

Use this mode to selectively apply Geo​Guard categories and customize the applied action. Make sure you include at least the categories Geo​Guard considers "must-have." Akamai can't guarantee optimal proxy protection if you leave them out.

best_​practice_​actionenum

Specifies how to field the proxy request.

enable_​configuration_​mode is BEST_​PRACTICE
{"displayType":"enum","options":["ALLOW","DENY","REDIRECT"],"tag":"select"}
{"if":{"attribute":"enableConfigurationMode","op":"eq","value":"BEST_PRACTICE"}}
ALLOW

Allow the request.

DENY

Deny the request.

REDIRECT

Respond with a redirect.

best_​practice_​redirecturlstring (allows variables)

This specifies the URL to which to redirect requests.

best_​practice_​action is REDIRECT
{"displayType":"string","tag":"input","type":"text"}
{"if":{"attribute":"bestPracticeAction","op":"eq","value":"REDIRECT"}}
detect_​anonymous_​vpnboolean

This enables detection of requests from anonymous VPNs.

enable_​configuration_​mode is ADVANCED
{"displayType":"boolean","tag":"input","type":"checkbox"}
{"if":{"attribute":"enableConfigurationMode","op":"eq","value":"ADVANCED"}}
detect_​anonymous_​vpn​Actionenum

Specifies how to field anonymous VPN requests.

detect_​anonymous_​vpn is true
{"displayType":"enum","options":["ALLOW","DENY","REDIRECT"],"tag":"select"}
{"if":{"attribute":"detectAnonymousVpn","op":"eq","value":true}}
ALLOW

Allow the request.

DENY

Deny the request.

REDIRECT

Respond with a redirect.

detect_​anonymous_​vpn​Redirecturlstring (allows variables)

This specifies the URL to which to redirect anonymous VPN requests.

detect_​anonymous_​vpn​Action is REDIRECT
{"displayType":"string","tag":"input","type":"text"}
{"if":{"attribute":"detectAnonymousVpnAction","op":"eq","value":"REDIRECT"}}
detect_​public_​proxyboolean

This enables detection of requests from public proxies.

enable_​configuration_​mode is ADVANCED
{"displayType":"boolean","tag":"input","type":"checkbox"}
{"if":{"attribute":"enableConfigurationMode","op":"eq","value":"ADVANCED"}}
detect_​public_​proxy​Actionenum

Specifies how to field public proxy requests.

detect_​public_​proxy is true
{"displayType":"enum","options":["ALLOW","DENY","REDIRECT"],"tag":"select"}
{"if":{"attribute":"detectPublicProxy","op":"eq","value":true}}
ALLOW

Allow the request.

DENY

Deny the request.

REDIRECT

Respond with a redirect.

detect_​public_​proxy​Redirecturlstring (allows variables)

This specifies the URL to which to redirect public proxy requests.

detect_​public_​proxy​Action is REDIRECT
{"displayType":"string","tag":"input","type":"text"}
{"if":{"attribute":"detectPublicProxyAction","op":"eq","value":"REDIRECT"}}
detect_​tor_​exit_​nodeboolean

This enables detection of requests from Tor exit nodes.

enable_​configuration_​mode is ADVANCED
{"displayType":"boolean","tag":"input","type":"checkbox"}
{"if":{"attribute":"enableConfigurationMode","op":"eq","value":"ADVANCED"}}
detect_​tor_​exit_​node​Actionenum

This specifies whether to DENY, ALLOW, or REDIRECT requests from Tor exit nodes.

detect_​tor_​exit_​node is true
{"displayType":"enum","options":["ALLOW","DENY","REDIRECT"],"tag":"select"}
{"if":{"attribute":"detectTorExitNode","op":"eq","value":true}}
ALLOW

Allow the request.

DENY

Deny the request.

REDIRECT

Respond with a redirect.

detect_​tor_​exit_​node​Redirecturlstring (allows variables)

This specifies the URL to which to redirect requests from Tor exit nodes.

detect_​tor_​exit_​node​Action is REDIRECT
{"displayType":"string","tag":"input","type":"text"}
{"if":{"attribute":"detectTorExitNodeAction","op":"eq","value":"REDIRECT"}}
detect_​smart_​dns_​proxyboolean

This enables detection of requests from smart DNS proxies.

enable_​configuration_​mode is ADVANCED
{"displayType":"boolean","tag":"input","type":"checkbox"}
{"if":{"attribute":"enableConfigurationMode","op":"eq","value":"ADVANCED"}}
detect_​smart_​dns_​proxy​Actionenum

Specifies whether to DENY, ALLOW, or REDIRECT smart DNS proxy requests.

detect_​smart_​dns_​proxy is true
{"displayType":"enum","options":["ALLOW","DENY","REDIRECT"],"tag":"select"}
{"if":{"attribute":"detectSmartDNSProxy","op":"eq","value":true}}
ALLOW

Allow the request.

DENY

Deny the request.

REDIRECT

Respond with a redirect.

detect_​smart_​dns_​proxy​Redirecturlstring (allows variables)

This specifies the URL to which to redirect DNS proxy requests.

detect_​smart_​dns_​proxy​Action is REDIRECT
{"displayType":"string","tag":"input","type":"text"}
{"if":{"attribute":"detectSmartDNSProxyAction","op":"eq","value":"REDIRECT"}}
detect_​hosting_​providerboolean

This detects requests from a hosting provider.

enable_​configuration_​mode is ADVANCED
{"displayType":"boolean","tag":"input","type":"checkbox"}
{"if":{"attribute":"enableConfigurationMode","op":"eq","value":"ADVANCED"}}
detect_​hosting_​provider​Actionenum

This specifies whether to DENY, ALLOW, or REDIRECT requests from hosting providers.

detect_​hosting_​provider is true
{"displayType":"enum","options":["ALLOW","DENY","REDIRECT"],"tag":"select"}
{"if":{"attribute":"detectHostingProvider","op":"eq","value":true}}
ALLOW

Allow the request.

DENY

Deny the request.

REDIRECT

Respond with a redirect.

detect_​hosting_​provider​Redirecturlstring (allows variables)

This specifies the absolute URL to which to redirect requests from hosting providers.

detect_​hosting_​provider​Action is REDIRECT
{"displayType":"string","tag":"input","type":"text"}
{"if":{"attribute":"detectHostingProviderAction","op":"eq","value":"REDIRECT"}}
detect_​vpn_​data_​centerboolean

This enables detection of requests from VPN data centers.

enable_​configuration_​mode is ADVANCED
{"displayType":"boolean","tag":"input","type":"checkbox"}
{"if":{"attribute":"enableConfigurationMode","op":"eq","value":"ADVANCED"}}
detect_​vpn_​data_​center​Actionenum

This specifies whether to DENY, ALLOW, or REDIRECT requests from VPN data centers.

detect_​vpn_​data_​center is true
{"displayType":"enum","options":["ALLOW","DENY","REDIRECT"],"tag":"select"}
{"if":{"attribute":"detectVpnDataCenter","op":"eq","value":true}}
ALLOW

Allow the request.

DENY

Deny the request.

REDIRECT

Respond with a redirect.

detect_​vpn_​data_​center​Redirecturlstring (allows variables)

This specifies the URL to which to redirect requests from VPN data centers.

detect_​vpn_​data_​center​Action is REDIRECT
{"displayType":"string","tag":"input","type":"text"}
{"if":{"attribute":"detectVpnDataCenterAction","op":"eq","value":"REDIRECT"}}
detect_​residential_​proxyboolean

This enables detection of requests from a residential proxy. See Enhanced Proxy Detection with Geo​Guard and learn more about this Geo​Guard category before enabling it.

enable_​configuration_​mode is ADVANCED
{"displayType":"boolean","tag":"input","type":"checkbox"}
{"if":{"attribute":"enableConfigurationMode","op":"eq","value":"ADVANCED"}}
detect_​residential_​proxy​Actionenum

This specifies whether to DENY, ALLOW, or REDIRECT requests from residential proxies.

detect_​residential_​proxy is true
{"displayType":"enum","options":["ALLOW","DENY","REDIRECT"],"tag":"select"}
{"if":{"attribute":"detectResidentialProxy","op":"eq","value":true}}
ALLOW

Allow the request.

DENY

Deny the request.

REDIRECT

Respond with a redirect.

detect_​residential_​proxy​Redirecturlstring (allows variables)

This specifies the URL to which to redirect requests.

detect_​residential_​proxy​Action is REDIRECT
{"displayType":"string","tag":"input","type":"text"}
{"if":{"attribute":"detectResidentialProxyAction","op":"eq","value":"REDIRECT"}}