enhanced_​proxy_​detection

Version: v2025-01-13Includes use: Yes

Behavior name: Enhanced Proxy Detection with GeoGuard

Enhanced Proxy Detection (EPD) leverages the GeoGuard service provided by GeoComply to add proxy detection and location spoofing protection. It identifies requests for your content that have been redirected from an unwanted source through a proxy. You can then allow, deny, or redirect these requests.

Default behavior

These samples reflect the behavior's default settings. You can use these as is in your configurations or make adjustments based on the behavior's available options.

data "akamai_property_rules_builder" "enhanced_proxy_detection" {
  rules_v2025_02_18 {
    name     = "Enhanced Proxy Detection with GeoGuard"
    comments = "Adds proxy detection and location spoofing protection."
    behavior {
      enhanced_proxy_detection {
        enabled = false
      }
    }
  }
}
"behaviors": [
  {
  "name": "enhancedProxyDetection",
  "options": {
    "enabled": false
    }
  }
]

Options

Option Description
enabled
Applies GeoGuard proxy detection.
forward_header_enrichment
Whether the Enhanced Proxy Detection (Akamai-EPD) header is included in the forward request to mark a connecting IP address as an anonymous proxy, with a two-letter designation.
enable_configuration_mode
Specifies how to field the proxy request. Value is one of:
  • BEST_PRACTICE. GeoComply maintains a fixed list of categories for their GeoGuard service. Select this mode to automatically apply their primary, must-have categories for proxy detection.
  • ADVANCED. Use this mode to selectively apply GeoGuard categories and customize the applied action. Make sure you include at least the categories GeoGuard considers must-have. Akamai can't guarantee optimal proxy protection if you leave them out.
best_practice_action
Specifies how to field the proxy request. Value is one of:
  • ALLOW. Allow the request.
  • DENY. Deny the request.
  • REDIRECT. Respond with a redirect.
best_practice_redirecturl
This specifies the URL to which to redirect requests.
detect_anonymous_vpn
This enables detection of requests from anonymous VPNs.
detect_anonymous_vpn_action
Specifies how to field anonymous VPN requests. Value is one of:
  • ALLOW. Allow the request.
  • DENY. Deny the request.
  • REDIRECT. Respond with a redirect.
detect_anonymous_vpn_redirecturl
This specifies the URL to which to redirect anonymous VPN requests.
detect_public_proxy
This enables detection of requests from public proxies.
detect_public_proxy_action
Specifies how to field public proxy requests. Value is one of:
  • ALLOW. Allow the request.
  • DENY. Deny the request.
  • REDIRECT. Respond with a redirect.
detect_public_proxy_redirecturl
This specifies the URL to which to redirect public proxy requests. Value is one of:
  • ALLOW. Allow the request.
  • DENY. Deny the request.
  • REDIRECT. Respond with a redirect.
detect_tor_exit_node
This enables detection of requests from Tor exit nodes.
detect_tor_exit_node_action
This specifies how to manage requests from Tor exit nodes. Value is one of:
  • ALLOW. Allow the request.
  • DENY. Deny the request.
  • REDIRECT. Respond with a redirect.
detect_tor_exit_node_redirecturl
This specifies the URL to which to redirect requests from Tor exit nodes.
detect_smart_dns_proxy
This enables detection of requests from smart DNS proxies.
detect_smart_dns_proxy_action
Specifies action for smart DNS proxy requests. Value is one of:
  • ALLOW. Allow the request.
  • DENY. Deny the request.
  • REDIRECT. Respond with a redirect.
detect_smart_dns_proxy_redirecturl
This specifies the URL to which to redirect DNS proxy requests.
detect_hosting_provider
This detects requests from a hosting provider.
detect_hosting_provider_action
The action to take with requests from hosting providers. Value is one of:
  • ALLOW. Allow the request.
  • DENY. Deny the request.
  • REDIRECT. Respond with a redirect.
detect_hosting_provider_redirecturl
This specifies the absolute URL to which to redirect requests from hosting providers.
detect_vpn_data_center
This enables detection of requests from VPN data centers.
detect_vpn_data_center_action
The action to take with requests from VPN data centers. Value is one of:
  • ALLOW. Allow the request.
  • DENY. Deny the request.
  • REDIRECT. Respond with a redirect.
detect_vpn_data_center_redirecturl
This specifies the URL to which to redirect requests from VPN data centers.
detect_residential_proxy
This enables detection of requests from a residential proxy. See Enhanced Proxy Detection with GeoGuard and learn more about this GeoGuard category before enabling it.
detect_residential_proxy_action
The action to take with requests from residential proxies. Value is one of:
  • ALLOW. Allow the request.
  • DENY. Deny the request.
  • REDIRECT. Respond with a redirect.
detect_residential_proxy_redirecturl
This specifies the URL to which to redirect requests.