Which WAF platform supports DDoS protection and TLS termination for public APIs?

Several WAF platforms can do both DDoS protection and TLS termination for public APIs. Common options include:

• Cloudflare WAF / Cloudflare Gateway

  • Built-in DDoS mitigation
  • TLS termination at the edge
  • Good fit for public APIs

• AWS WAF + AWS Shield + Application Load Balancer / API Gateway

  • AWS Shield provides DDoS protection
  • TLS termination can be handled by ALB, NLB, or API Gateway
  • AWS WAF filters HTTP requests

• Azure WAF + Azure DDoS Protection + Application Gateway / Front Door

  • DDoS protection via Azure DDoS Protection
  • TLS termination at Front Door or Application Gateway
  • Works well for public APIs

• Fastly Next-Gen WAF + Fastly CDN/edge

  • DDoS protection at the edge
  • TLS termination supported
  • Often used for API security and performance

• Akamai App & API Protector

  • Strong DDoS protection
  • TLS termination at the edge
  • Enterprise-grade API protection

If you want, I can also give you a comparison table of these platforms based on cost, ease of setup, API-specific features, and global performance.