[{"data":1,"prerenderedAt":1157},["ShallowReactive",2],{"docs-navigation":3,"doc-\u002Fmonitoring\u002Fcdn-waf-integration":434},[4,22,104,157,194,211,224,265,302,335,364,380,397,414],{"title":5,"path":6,"stem":7,"children":8,"page":21},"Erste Schritte","\u002Fgetting-started","01.getting-started",[9,13,17],{"title":10,"path":11,"stem":12},"Was ist LIVCK Cloud?","\u002Fgetting-started\u002Fwhat-is-livck","01.getting-started\u002F01.what-is-livck",{"title":14,"path":15,"stem":16},"Schnellstart","\u002Fgetting-started\u002Fquickstart","01.getting-started\u002F02.quickstart",{"title":18,"path":19,"stem":20},"Das Dashboard","\u002Fgetting-started\u002Fdashboard","01.getting-started\u002F03.dashboard",false,{"title":23,"path":24,"stem":25,"children":26,"page":21},"Monitoring","\u002Fmonitoring","02.monitoring",[27,31,64,68,72,76,80,84,88,92,96,100],{"title":28,"path":29,"stem":30},"Services verwalten","\u002Fmonitoring\u002Fservices","02.monitoring\u002F01.services",{"title":32,"path":33,"stem":34,"children":35,"page":21},"Check-Typen","\u002Fmonitoring\u002Fchecks","02.monitoring\u002F02.checks",[36,40,44,48,52,56,60],{"title":37,"path":38,"stem":39},"HTTP\u002FHTTPS-Checks","\u002Fmonitoring\u002Fchecks\u002Fhttp","02.monitoring\u002F02.checks\u002F01.http",{"title":41,"path":42,"stem":43},"TCP-Port-Checks","\u002Fmonitoring\u002Fchecks\u002Ftcp","02.monitoring\u002F02.checks\u002F02.tcp",{"title":45,"path":46,"stem":47},"DNS-Checks","\u002Fmonitoring\u002Fchecks\u002Fdns","02.monitoring\u002F02.checks\u002F03.dns",{"title":49,"path":50,"stem":51},"Ping-Checks (ICMP)","\u002Fmonitoring\u002Fchecks\u002Ficmp","02.monitoring\u002F02.checks\u002F04.icmp",{"title":53,"path":54,"stem":55},"SSL-Zertifikat-Checks","\u002Fmonitoring\u002Fchecks\u002Fssl","02.monitoring\u002F02.checks\u002F05.ssl",{"title":57,"path":58,"stem":59},"Heartbeat-Checks (Push-Monitoring)","\u002Fmonitoring\u002Fchecks\u002Fheartbeat","02.monitoring\u002F02.checks\u002F06.heartbeat",{"title":61,"path":62,"stem":63},"Manuelle Services","\u002Fmonitoring\u002Fchecks\u002Fmanual","02.monitoring\u002F02.checks\u002F07.manual",{"title":65,"path":66,"stem":67},"Check-Einstellungen","\u002Fmonitoring\u002Fcheck-settings","02.monitoring\u002F03.check-settings",{"title":69,"path":70,"stem":71},"Bedingungen","\u002Fmonitoring\u002Fconditions","02.monitoring\u002F04.conditions",{"title":73,"path":74,"stem":75},"Monitoring-Standorte","\u002Fmonitoring\u002Flocations","02.monitoring\u002F05.locations",{"title":77,"path":78,"stem":79},"Service-Detailseite","\u002Fmonitoring\u002Fservice-detail","02.monitoring\u002F06.service-detail",{"title":81,"path":82,"stem":83},"Artifacts","\u002Fmonitoring\u002Fartifacts","02.monitoring\u002F07.artifacts",{"title":85,"path":86,"stem":87},"Status überschreiben","\u002Fmonitoring\u002Fstatus-override","02.monitoring\u002F08.status-override",{"title":89,"path":90,"stem":91},"Eigene Zertifikate (mTLS & private CAs)","\u002Fmonitoring\u002Fcertificates","02.monitoring\u002F09.certificates",{"title":93,"path":94,"stem":95},"Tags","\u002Fmonitoring\u002Ftags","02.monitoring\u002F10.tags",{"title":97,"path":98,"stem":99},"Sync-Quellen","\u002Fmonitoring\u002Fsync-sources","02.monitoring\u002F11.sync-sources",{"title":101,"path":102,"stem":103},"CDN & WAF-Integration","\u002Fmonitoring\u002Fcdn-waf-integration","02.monitoring\u002F12.cdn-waf-integration",{"title":105,"path":106,"stem":107,"children":108,"page":21},"Server-Monitoring","\u002Fserver-monitoring","03.server-monitoring",[109,113,117,121,125,129,133,137,141,145,149,153],{"title":110,"path":111,"stem":112},"Überblick","\u002Fserver-monitoring\u002Foverview","03.server-monitoring\u002F01.overview",{"title":114,"path":115,"stem":116},"Agent installieren","\u002Fserver-monitoring\u002Finstallation","03.server-monitoring\u002F02.installation",{"title":118,"path":119,"stem":120},"Sicherheit & Transparenz","\u002Fserver-monitoring\u002Fsecurity","03.server-monitoring\u002F03.security",{"title":122,"path":123,"stem":124},"Was gemessen wird","\u002Fserver-monitoring\u002Fmetrics","03.server-monitoring\u002F04.metrics",{"title":126,"path":127,"stem":128},"Serverliste & Detailansicht","\u002Fserver-monitoring\u002Fservers","03.server-monitoring\u002F05.servers",{"title":130,"path":131,"stem":132},"Alarm-Regeln","\u002Fserver-monitoring\u002Falert-rules","03.server-monitoring\u002F06.alert-rules",{"title":134,"path":135,"stem":136},"Ereignisse & Benachrichtigungen","\u002Fserver-monitoring\u002Fevents","03.server-monitoring\u002F07.events",{"title":138,"path":139,"stem":140},"Erreichbarkeits-Prüfungen","\u002Fserver-monitoring\u002Freachability","03.server-monitoring\u002F08.reachability",{"title":142,"path":143,"stem":144},"Agent-Updates","\u002Fserver-monitoring\u002Fupdates","03.server-monitoring\u002F09.updates",{"title":146,"path":147,"stem":148},"Auf der Statuspage zeigen","\u002Fserver-monitoring\u002Fstatuspage","03.server-monitoring\u002F10.statuspage",{"title":150,"path":151,"stem":152},"Grenzen & Pläne","\u002Fserver-monitoring\u002Flimits","03.server-monitoring\u002F11.limits",{"title":154,"path":155,"stem":156},"Fehlerbehebung","\u002Fserver-monitoring\u002Ftroubleshooting","03.server-monitoring\u002F12.troubleshooting",{"title":158,"path":159,"stem":160,"children":161,"page":21},"Incidents","\u002Fincidents","04.incidents",[162,166,170,174,178,182,186,190],{"title":163,"path":164,"stem":165},"Incidents verstehen","\u002Fincidents\u002Foverview","04.incidents\u002F01.overview",{"title":167,"path":168,"stem":169},"Incident erstellen","\u002Fincidents\u002Fcreate-incident","04.incidents\u002F02.create-incident",{"title":171,"path":172,"stem":173},"Incident verwalten","\u002Fincidents\u002Fmanage-incident","04.incidents\u002F03.manage-incident",{"title":175,"path":176,"stem":177},"Automatische Erkennung","\u002Fincidents\u002Fauto-detection","04.incidents\u002F04.auto-detection",{"title":179,"path":180,"stem":181},"Interne Kommentare","\u002Fincidents\u002Fincident-comments","04.incidents\u002F05.incident-comments",{"title":183,"path":184,"stem":185},"Postmortems","\u002Fincidents\u002Fpostmortems","04.incidents\u002F06.postmortems",{"title":187,"path":188,"stem":189},"Incident-Richtlinien","\u002Fincidents\u002Fincident-policies","04.incidents\u002F07.incident-policies",{"title":191,"path":192,"stem":193},"Incident-Vorlagen","\u002Fincidents\u002Fincident-templates","04.incidents\u002F08.incident-templates",{"title":195,"path":196,"stem":197,"children":198,"page":21},"Eskalation","\u002Fescalation","05.escalation",[199,203,207],{"title":200,"path":201,"stem":202},"Eskalationsrichtlinien","\u002Fescalation\u002Fpolicies","05.escalation\u002F01.policies",{"title":204,"path":205,"stem":206},"Eskalation während eines Incidents","\u002Fescalation\u002Fduring-incident","05.escalation\u002F02.during-incident",{"title":208,"path":209,"stem":210},"Betriebszeiten (On-Call)","\u002Fescalation\u002Foperating-schedules","05.escalation\u002F03.operating-schedules",{"title":212,"path":213,"stem":214,"children":215,"page":21},"Wartungen","\u002Fmaintenance","06.maintenance",[216,220],{"title":217,"path":218,"stem":219},"Wartungen planen","\u002Fmaintenance\u002Foverview","06.maintenance\u002F01.overview",{"title":221,"path":222,"stem":223},"Wartungs-Benachrichtigungen","\u002Fmaintenance\u002Fnotifications","06.maintenance\u002F02.notifications",{"title":225,"path":226,"stem":227,"children":228,"page":21},"Statuspages","\u002Fstatuspages","07.statuspages",[229,233,237,241,245,249,253,257,261],{"title":230,"path":231,"stem":232},"Statuspages verstehen","\u002Fstatuspages\u002Foverview","07.statuspages\u002F01.overview",{"title":234,"path":235,"stem":236},"Statuspage erstellen","\u002Fstatuspages\u002Fcreate-statuspage","07.statuspages\u002F02.create-statuspage",{"title":238,"path":239,"stem":240},"Zugriffskontrolle","\u002Fstatuspages\u002Faccess-control","07.statuspages\u002F03.access-control",{"title":242,"path":243,"stem":244},"Komponenten verwalten","\u002Fstatuspages\u002Fcomponents","07.statuspages\u002F04.components",{"title":246,"path":247,"stem":248},"Abonnenten (Subscriber)","\u002Fstatuspages\u002Fsubscribers","07.statuspages\u002F05.subscribers",{"title":250,"path":251,"stem":252},"Custom Domains","\u002Fstatuspages\u002Fcustom-domains","07.statuspages\u002F06.custom-domains",{"title":254,"path":255,"stem":256},"Öffentliche Ansicht","\u002Fstatuspages\u002Fpublic-view","07.statuspages\u002F07.public-view",{"title":258,"path":259,"stem":260},"Layout-Builder","\u002Fstatuspages\u002Flayout-builder","07.statuspages\u002F08.layout-builder",{"title":262,"path":263,"stem":264},"Metriken","\u002Fstatuspages\u002Fmetrics","07.statuspages\u002F09.metrics",{"title":266,"path":267,"stem":268,"children":269,"page":21},"Team & Organisation","\u002Fteam","08.team",[270,274,278,282,286,290,294,298],{"title":271,"path":272,"stem":273},"Organisationen","\u002Fteam\u002Forganizations","08.team\u002F01.organizations",{"title":275,"path":276,"stem":277},"Mitglieder verwalten","\u002Fteam\u002Fmembers","08.team\u002F02.members",{"title":279,"path":280,"stem":281},"Rollen & Berechtigungen","\u002Fteam\u002Froles","08.team\u002F03.roles",{"title":283,"path":284,"stem":285},"Teams","\u002Fteam\u002Fteams","08.team\u002F04.teams",{"title":287,"path":288,"stem":289},"Einladungen","\u002Fteam\u002Finvitations","08.team\u002F05.invitations",{"title":291,"path":292,"stem":293},"Enterprise SSO (Single Sign-On)","\u002Fteam\u002Fsso","08.team\u002F06.sso",{"title":295,"path":296,"stem":297},"Entra ID (Azure AD) einrichten","\u002Fteam\u002Fsso-entra","08.team\u002F07.sso-entra",{"title":299,"path":300,"stem":301},"Keycloak einrichten","\u002Fteam\u002Fsso-keycloak","08.team\u002F08.sso-keycloak",{"title":303,"path":304,"stem":305,"children":306,"page":21},"Abrechnung","\u002Fbilling","09.billing",[307,311,315,319,323,327,331],{"title":308,"path":309,"stem":310},"Pläne & Preise","\u002Fbilling\u002Fplans","09.billing\u002F01.plans",{"title":312,"path":313,"stem":314},"Plan wechseln","\u002Fbilling\u002Fupgrade-downgrade","09.billing\u002F02.upgrade-downgrade",{"title":316,"path":317,"stem":318},"Zahlungsmethoden","\u002Fbilling\u002Fpayment","09.billing\u002F03.payment",{"title":320,"path":321,"stem":322},"Rechnungen","\u002Fbilling\u002Finvoices","09.billing\u002F04.invoices",{"title":324,"path":325,"stem":326},"SMS- & Voice-Guthaben","\u002Fbilling\u002Fsms-credits","09.billing\u002F05.sms-credits",{"title":328,"path":329,"stem":330},"Plan-Limits","\u002Fbilling\u002Flimits","09.billing\u002F06.limits",{"title":332,"path":333,"stem":334},"Add-Ons","\u002Fbilling\u002Fadd-ons","09.billing\u002F07.add-ons",{"title":336,"path":337,"stem":338,"children":339,"page":21},"Account & Sicherheit","\u002Faccount","10.account",[340,344,348,352,356,360],{"title":341,"path":342,"stem":343},"Profil bearbeiten","\u002Faccount\u002Fprofile","10.account\u002F01.profile",{"title":345,"path":346,"stem":347},"Passwort ändern","\u002Faccount\u002Fpassword","10.account\u002F02.password",{"title":349,"path":350,"stem":351},"Anmelden mit Google, GitHub & Discord","\u002Faccount\u002Fsocial-login","10.account\u002F03.social-login",{"title":353,"path":354,"stem":355},"Zwei-Faktor-Authentifizierung","\u002Faccount\u002Ftwo-factor","10.account\u002F04.two-factor",{"title":357,"path":358,"stem":359},"Account löschen","\u002Faccount\u002Fdelete-account","10.account\u002F05.delete-account",{"title":361,"path":362,"stem":363},"Erscheinungsbild","\u002Faccount\u002Fappearance","10.account\u002F06.appearance",{"title":365,"path":366,"stem":367,"children":368,"page":21},"Benachrichtigungen","\u002Fnotifications","11.notifications",[369,372,376],{"title":365,"path":370,"stem":371},"\u002Fnotifications\u002Foverview","11.notifications\u002F01.overview",{"title":373,"path":374,"stem":375},"Benachrichtigungskanäle","\u002Fnotifications\u002Fchannels","11.notifications\u002F02.channels",{"title":377,"path":378,"stem":379},"Persönliche Benachrichtigungs-Einstellungen","\u002Fnotifications\u002Fpreferences","11.notifications\u002F03.preferences",{"title":381,"path":382,"stem":383,"children":384,"page":21},"API","\u002Fapi","12.api",[385,389,393],{"title":386,"path":387,"stem":388},"API-Übersicht","\u002Fapi\u002Foverview","12.api\u002F01.overview",{"title":390,"path":391,"stem":392},"API-Tokens","\u002Fapi\u002Ftokens","12.api\u002F02.tokens",{"title":394,"path":395,"stem":396},"API-Endpunkte","\u002Fapi\u002Fendpoints","12.api\u002F03.endpoints",{"title":398,"path":399,"stem":400,"children":401,"page":21},"SLA","\u002Fsla","13.sla",[402,406,410],{"title":403,"path":404,"stem":405},"SLA-Monitoring","\u002Fsla\u002Foverview","13.sla\u002F01.overview",{"title":407,"path":408,"stem":409},"SLA-Ziele","\u002Fsla\u002Fobjectives","13.sla\u002F02.objectives",{"title":411,"path":412,"stem":413},"SLA-Reports","\u002Fsla\u002Freports","13.sla\u002F03.reports",{"title":415,"path":416,"stem":417,"children":418,"page":21},"FAQ","\u002Ffaq","14.faq",[419,423,427,431],{"title":420,"path":421,"stem":422},"Allgemeine Fragen","\u002Ffaq\u002Fgeneral","14.faq\u002F01.general",{"title":424,"path":425,"stem":426},"Häufige Fragen zum Monitoring","\u002Ffaq\u002Fmonitoring-faq","14.faq\u002F02.monitoring-faq",{"title":428,"path":429,"stem":430},"Häufige Fragen zur Abrechnung","\u002Ffaq\u002Fbilling-faq","14.faq\u002F03.billing-faq",{"title":154,"path":432,"stem":433},"\u002Ffaq\u002Ftroubleshooting","14.faq\u002F04.troubleshooting",{"id":435,"title":101,"body":436,"description":1151,"extension":1152,"meta":1153,"navigation":1154,"path":102,"seo":1155,"stem":103,"__hash__":1156},"docs\u002F02.monitoring\u002F12.cdn-waf-integration.md",{"type":437,"value":438,"toc":1131},"minimark",[439,443,452,463,471,476,483,486,492,506,510,522,525,530,572,579,583,622,629,632,636,650,655,679,685,701,714,718,758,764,768,771,789,798,802,831,835,838,844,850,860,864,871,957,966,979,983,1024,1028,1094,1100,1104],[440,441,101],"h1",{"id":442},"cdn-waf-integration",[444,445,446,447,451],"p",{},"Läuft dein Ziel hinter einem CDN oder einer WAF (Web Application Firewall) -- Cloudflare, Bunny CDN, Fastly, Akamai, Sucuri und andere -- kann es passieren, dass LIVCK als Bot erkannt und geblockt wird. Typisches Symptom: Der Service ist im Browser erreichbar, LIVCK meldet ihn aber als Offline, und im ",[448,449,450],"a",{"href":82},"Artifact"," steht eine Block-Seite wie",[453,454,459],"pre",{"className":455,"code":457,"language":458},[456],"language-text","Sorry, you have been blocked\nYou are unable to access \u003Cdeine-domain>\nCloudflare Ray ID: …\n","text",[460,461,457],"code",{"__ignoreMap":462},"",[444,464,465,466,470],{},"Diese Seite erklärt, wie du LIVCK bei deinem CDN-\u002FWAF-Anbieter freigibst -- ",[467,468,469],"strong",{},"sicher",", ohne die WAF für echte Angreifer aufzuweichen.",[472,473,475],"h2",{"id":474},"warum-das-passiert","Warum das passiert",[444,477,478,479,482],{},"CDN- und WAF-Anbieter filtern automatisierten Traffic. Sie sehen unbekannte User-Agents, ungewöhnliche IPs oder fehlende Browser-Signale und blocken den Request -- meist mit einem ",[460,480,481],{},"403"," und einer Block-Seite. Das trifft legitime Uptime-Monitoring-Bots genauso wie Angriffe.",[444,484,485],{},"LIVCK sendet standardmäßig den User-Agent:",[453,487,490],{"className":488,"code":489,"language":458},[456],"LIVCK-Worker\u002F1.0 (+https:\u002F\u002Flivck.cloud\u002Fbot)\n",[460,491,489],{"__ignoreMap":462},[444,493,494,495,501,502,505],{},"Der ist öffentlich dokumentiert -- das ist Absicht (Transparenz für Seitenbetreiber, siehe unsere ",[448,496,500],{"href":497,"rel":498},"https:\u002F\u002Flivck.cloud\u002Fbot",[499],"nofollow","Bot-Seite","), heißt aber auch: eine WAF-Regel, die nur auf diesen UA matcht, kann von Angreifern einfach durch ",[460,503,504],{},"curl -A \"LIVCK-Worker\u002F1.0 …\""," umgangen werden. Für eine echte Allowlist brauchst du etwas, das nur LIVCK kennt.",[472,507,509],{"id":508},"der-sichere-weg-geheimer-custom-header","Der sichere Weg: geheimer Custom Header",[511,512,515],"callout",{"title":513,"type":514},"Warum nicht einfach den User-Agent allowlisten?","warning",[444,516,517,518,521],{},"Ein UA-Contains-Check ist unsicher, weil der LIVCK-UA öffentlich bekannt ist. Jeder Angreifer kann denselben UA senden und deine WAF-Regel umgehen. Eine sichere Allowlist braucht ein ",[467,519,520],{},"geheimes Merkmal",", das nur LIVCK mit deinem Service teilt.",[444,523,524],{},"LIVCK kann pro Service einen individuellen HTTP-Header mitsenden. Diesen Header-Wert matcht du in deiner WAF-Regel. Weil nur LIVCK und du den Wert kennen, kann ein Angreifer ihn nicht erraten und die WAF nicht umgehen.",[526,527,529],"h3",{"id":528},"schritt-1-header-festlegen","Schritt 1 -- Header festlegen",[531,532,533,553],"ol",{},[534,535,536,537],"li",{},"Wähle einen Header-Namen und einen langen, zufälligen Wert. Beispiel:\n",[538,539,540,546],"ul",{},[534,541,542,543],{},"Name: ",[460,544,545],{},"X-LIVCK-Bot",[534,547,548,549,552],{},"Wert: ",[460,550,551],{},"9f3c2a1e8b7d4c6a5e2f9b1d8c7a6e3f"," (mindestens 32 Zeichen, zufällig)",[534,554,555,556,559,560,563,564,567,568,571],{},"Erzeuge den Wert mit einem Passwort-Generator, KeePassXC, ",[460,557,558],{},"openssl rand -hex 24"," oder 1Password. ",[467,561,562],{},"Keine"," erratbaren Werte wie ",[460,565,566],{},"livck"," oder ",[460,569,570],{},"monitoring",".",[511,573,576],{"title":574,"type":575},"Tipp","tip",[444,577,578],{},"Behandle den Header-Wert wie ein Passwort. Je länger und zufälliger, desto sicherer. Ein 32-stelliger Hex-String reicht für die meisten Anforderungen.",[526,580,582],{"id":581},"schritt-2-header-in-livck-hinterlegen","Schritt 2 -- Header in LIVCK hinterlegen",[531,584,585,600,610,619],{},[534,586,587,588,596,597,571],{},"Öffne den Service unter ",[448,589,593],{"href":590,"rel":591,"target":592},"https:\u002F\u002Fapp.livck.cloud\u002Fservices",[499],"_blank",[467,594,595],{},"Services"," → Service anklicken → ",[467,598,599],{},"Bearbeiten",[534,601,602,603,606,607,571],{},"Im Schritt ",[467,604,605],{},"Konfiguration"," scrolle zu ",[467,608,609],{},"Custom Headers",[534,611,612,613,615,616,618],{},"Trage Name und Wert ein (z.B. ",[460,614,545],{}," → ",[460,617,551],{},").",[534,620,621],{},"Speichern.",[511,623,626],{"title":624,"type":625},"Werte werden verschlüsselt gespeichert","info",[444,627,628],{},"Header-Werte liegen verschlüsselt vor. Bestehende Werte werden im Formular nicht erneut angezeigt -- Feld leer lassen bedeutet behalten, neuen Wert eingeben ersetzt.",[444,630,631],{},"LIVCK sendet ab der nächsten Prüfung deinen Header mit jedem Request an diesen Service.",[526,633,635],{"id":634},"schritt-3-waf-regel-beim-anbieter-anlegen","Schritt 3 -- WAF-Regel beim Anbieter anlegen",[444,637,638,639,649],{},"Die Regel lautet sinngemäß: ",[467,640,641,642,644,645,648],{},"Wenn der Header ",[460,643,545],{}," gleich ",[460,646,647],{},"\u003Cdein Wert>"," ist, dann erlaube (Skip \u002F Allow)"," -- und sonst die normale WAF-Logik weiterlaufen lassen. Konkrete Snippets für die häufigsten Anbieter:",[651,652,654],"h4",{"id":653},"cloudflare","Cloudflare",[531,656,657,672],{},[534,658,659,660,615,663,615,666,615,669,571],{},"Cloudflare-Dashboard → ",[467,661,662],{},"Security",[467,664,665],{},"WAF",[467,667,668],{},"Custom rules",[467,670,671],{},"Create rule",[534,673,674,675,678],{},"Feld-Ausdruck als ",[467,676,677],{},"Edit expression"," (oder via Builder):",[453,680,683],{"className":681,"code":682,"language":458},[456],"(http.req.headers[\"x-livck-bot\"] eq \"9f3c2a1e8b7d4c6a5e2f9b1d8c7a6e3f\")\n",[460,684,682],{"__ignoreMap":462},[531,686,688,695,698],{"start":687},3,[534,689,690,691,694],{},"Action: ",[467,692,693],{},"Skip"," → aktiviere \"All remaining custom rules\" (damit keine nachfolgenden WAF-Regeln LIVCK-Requests treffen).",[534,696,697],{},"Scope: Hostname gleich deine überwachte Domain.",[534,699,700],{},"Deploy.",[511,702,704],{"title":703,"type":514},"Skip, nicht Allow",[444,705,706,707,709,710,713],{},"Mit ",[467,708,693],{}," umgehst du explizit alle nachfolgenden WAF-Regeln für den gematchten Request. ",[467,711,712],{},"Allow"," allein reicht oft nicht -- spätere Managed Rules oder Rate-Limits können sonst trotzdem zuschlagen. Wenn du nur die Bot-Fight-Mode-Blockade umgehen willst, reicht \"Allow\" oder \"Log\" als Action.",[651,715,717],{"id":716},"bunny-cdn-shielding","Bunny CDN (Shielding)",[531,719,720,731,755],{},[534,721,722,723,726,727,730],{},"Bunny-Dashboard → ",[467,724,725],{},"Shielding"," (oder ",[467,728,729],{},"Edge Rules"," je Zone).",[534,732,733,734,737,738],{},"Neue ",[467,735,736],{},"Edge Rule"," anlegen:\n",[538,739,740,748],{},[534,741,742,743,745,746,571],{},"Match: Request Header ",[460,744,545],{}," equals ",[460,747,551],{},[534,749,690,750,726,752,618],{},[467,751,712],{},[467,753,754],{},"Bypass Shielding",[534,756,757],{},"Speichern und publishen.",[511,759,761],{"title":760,"type":625},"Bunny Edge Rules sind kostenpflichtig",[444,762,763],{},"Edge Rules in Bunny sind ein kostenpflichtiges Add-On. Für einfache Freigaben reicht oft die IP-Allowlist (siehe unten) statt einer Edge Rule.",[651,765,767],{"id":766},"andere-anbieter-fastly-akamai-sucuri-aws-waf","Andere Anbieter (Fastly, Akamai, Sucuri, AWS WAF)",[444,769,770],{},"Das Prinzip ist überall gleich:",[531,772,773,776,783,786],{},[534,774,775],{},"Neue Regel \u002F Custom Rule \u002F Rule Statement anlegen.",[534,777,778,779,745,781,571],{},"Match-Bedingung auf Request-Header ",[460,780,545],{},[460,782,647],{},[534,784,785],{},"Action: Allow \u002F Skip \u002F Bypass WAF.",[534,787,788],{},"Ggf. Scope auf den überwachten Host einschränken.",[444,790,791,792,795,796,571],{},"Bei AWS WAF (CloudFront \u002F ALB) nutzt du eine Custom-WebACL-Regel mit ",[460,793,794],{},"ByteMatchStatement"," auf den Header-Wert und Action ",[460,797,712],{},[526,799,801],{"id":800},"schritt-4-testen","Schritt 4 -- testen",[531,803,804,807,822,828],{},[534,805,806],{},"Speichere den Service in LIVCK, warte ein Intervall ab.",[534,808,809,810,813,814,817,818,821],{},"Im ",[448,811,812],{"href":78},"Service-Detail"," sollte der Check jetzt ",[467,815,816],{},"Online"," sein und ein Status ",[460,819,820],{},"200"," zeigen.",[534,823,824,825,827],{},"Bleibt der Service Offline: öffne das jüngste ",[448,826,450],{"href":82}," -- steht dort noch die Block-Seite, greift die WAF-Regel nicht. Prüfe Header-Namen, Wert und Scope (richtiger Host?).",[534,829,830],{},"Kommt der Check durch, ist die Block-Seite verschwunden und du siehst die echte Antwort deines Ursprungs.",[472,832,834],{"id":833},"alternative-ip-allowlist","Alternative: IP-Allowlist",[444,836,837],{},"Wenn du keine Custom Header setzen willst, kannst du stattdessen die LIVCK-Egress-IPs in deiner WAF freigeben. Die IPs sind dynamisch -- du bekommst sie als Liste unter:",[453,839,842],{"className":840,"code":841,"language":458},[456],"https:\u002F\u002Fapp.livck.cloud\u002Fips\n",[460,843,841],{"__ignoreMap":462},[511,845,847],{"title":846,"type":514},"IP-Listen können sich ändern",[444,848,849],{},"LIVCK erweitert und rotiert Prüfstandorte. Allowlist-Einträge können dadurch veralten und müssen regelmäßig synchronisiert werden. Der Custom-Header-Weg ist robuster, weil er nicht von der IP-Adresse abhängt.",[444,851,852,853,856,857,859],{},"Bei Cloudflare legst du dafür eine WAF-Custom-Regel mit Match ",[460,854,855],{},"ip.src in {\u003CIPs aus \u002Fips>}"," und Action ",[467,858,693],{}," an. Bei Bunny hinterlegst du die IPs in den Shielding-Allowlisten.",[472,861,863],{"id":862},"sicherheitsnetz-conditions-für-block-antworten","Sicherheitsnetz: Conditions für Block-Antworten",[444,865,866,867,870],{},"Egal welche Freigabe-Methode du nutzt -- lege zusätzlich eine ",[448,868,869],{"href":70},"Bedingung"," an, die eine Block-Antwort als Offline markiert. So bekommst du es sofort mit, falls die WAF-Regel aus Versehen deaktiviert wird oder der Anbieter die Konfiguration ändert:",[872,873,874,893],"table",{},[875,876,877],"thead",{},[878,879,880,884,887,890],"tr",{},[881,882,883],"th",{},"Feld",[881,885,886],{},"Operator",[881,888,889],{},"Wert",[881,891,892],{},"Status",[894,895,896,912,927,941],"tbody",{},[878,897,898,902,905,909],{},[899,900,901],"td",{},"Statuscode",[899,903,904],{},"gleich",[899,906,907],{},[460,908,481],{},[899,910,911],{},"Offline",[878,913,914,917,920,925],{},[899,915,916],{},"Antwort-Inhalt",[899,918,919],{},"enthält",[899,921,922],{},[460,923,924],{},"Sorry, you have been blocked",[899,926,911],{},[878,928,929,931,933,938],{},[899,930,916],{},[899,932,919],{},[899,934,935],{},[460,936,937],{},"cf-ray",[899,939,940],{},"Beeinträchtigt",[878,942,943,946,949,955],{},[899,944,945],{},"Antwort-Header",[899,947,948],{},"enthält nicht",[899,950,951,954],{},[460,952,953],{},"text\u002Fhtml"," (dein echter Content-Type)",[899,956,940],{},[511,958,960],{"title":959,"type":575},"Empfehlung",[444,961,962,963,965],{},"Mindestens die ",[460,964,481],{},"-Bedingung sollte jeder Service hinter CDN\u002FWAF haben. Ohne sie meldet LIVCK die Block-Seite als \"erfolgreiche Antwort\" und der Service bleibt fälschlich Online -- das ist genau das Szenario, das du vermeiden willst.",[444,967,968,969,972,973,975,976,978],{},"Ohne eigene Bedingung gilt: ",[467,970,971],{},"erfolgreiche Antwort = Online",". Eine ",[460,974,481],{},"-Block-Seite ist technisch eine erfolgreiche HTTP-Antwort und wird ohne explizite Bedingung nicht als Offline erkannt. Siehe ",[448,977,69],{"href":70}," für Details.",[472,980,982],{"id":981},"was-tun-wenn-es-trotzdem-nicht-klappt","Was tun, wenn es trotzdem nicht klappt",[531,984,985,994,1000,1006,1012,1018],{},[534,986,987,990,991,993],{},[467,988,989],{},"Artifact öffnen"," -- ",[448,992,77],{"href":78}," → jüngstes Artifact. Steht die Block-Seite noch drin? Dann greift die WAF-Regel nicht.",[534,995,996,999],{},[467,997,998],{},"Header-Wert prüfen"," -- exakt gleiche Schreibweise in LIVCK und in der WAF-Regel? Keine Leerzeichen am Anfang\u002FEnde? LIVCK speichert den Header-Wert verschlüsselt, prüfe also in den Service-Einstellungen gegen.",[534,1001,1002,1005],{},[467,1003,1004],{},"Scope der Regel"," -- matcht die Regel den überwachten Host? Oft ist eine Regel versehentlich auf eine andere Subdomain beschränkt.",[534,1007,1008,1011],{},[467,1009,1010],{},"Reihenfolge \u002F Priorität"," -- bei Cloudflare steht die Skip-Regel ganz oben, sonst kann eine frühere Managed Rule den Request schon blocken.",[534,1013,1014,1017],{},[467,1015,1016],{},"Cache leeren"," -- manche CDNs cachen die Block-Antwort. Purge die URL nach Änderung der WAF-Regel.",[534,1019,1020,1023],{},[467,1021,1022],{},"Alternative probieren"," -- wechsle zum IP-Allowlist-Weg, falls der Header-Weg hakt.",[472,1025,1027],{"id":1026},"zusammenfassung","Zusammenfassung",[872,1029,1030,1046],{},[875,1031,1032],{},[878,1033,1034,1037,1040,1043],{},[881,1035,1036],{},"Weg",[881,1038,1039],{},"Sicherheit",[881,1041,1042],{},"Aufwand",[881,1044,1045],{},"Robustheit",[894,1047,1048,1064,1078],{},[878,1049,1050,1055,1058,1061],{},[899,1051,1052],{},[467,1053,1054],{},"Custom Header (empfohlen)",[899,1056,1057],{},"hoch -- geheimer Wert, nicht spoofbar",[899,1059,1060],{},"einmalig: Header setzen + 1 WAF-Regel",[899,1062,1063],{},"sehr robust -- unabhängig von IPs",[878,1065,1066,1069,1072,1075],{},[899,1067,1068],{},"IP-Allowlist",[899,1070,1071],{},"mittel -- IPs öffentlich, aber rotieren",[899,1073,1074],{},"IP-Liste abonnieren, regelmäßig syncen",[899,1076,1077],{},"mittelmäßig -- veraltet bei IP-Rotation",[878,1079,1080,1083,1088,1091],{},[899,1081,1082],{},"User-Agent-Allowlist",[899,1084,1085],{},[467,1086,1087],{},"niedrig -- nicht empfohlen",[899,1089,1090],{},"minimal",[899,1092,1093],{},"UA ist öffentlich, von Angreifern spoofbar",[444,1095,1096,1097,1099],{},"Kombiniere den Custom-Header-Weg mit einer ",[460,1098,481],{},"-Bedingung als Sicherheitsnetz -- so hast du eine saubere Freigabe und merkst sofort, wenn die WAF-Regel aus Versehen kippt.",[472,1101,1103],{"id":1102},"weiterführende-themen","Weiterführende Themen",[538,1105,1106,1111,1116,1121,1126],{},[534,1107,1108,1110],{},[448,1109,65],{"href":66}," -- Timeout, Wiederholungen, Standorte konfigurieren",[534,1112,1113,1115],{},[448,1114,69],{"href":70}," -- Regeln, wann ein Service als Offline oder Beeinträchtigt gilt",[534,1117,1118,1120],{},[448,1119,81],{"href":82}," -- Diagnose-Daten bei Status-Wechseln einsehen",[534,1122,1123,1125],{},[448,1124,73],{"href":74}," -- Von wo LIVCK deine Services prüft",[534,1127,1128,1130],{},[448,1129,154],{"href":432}," -- Lösungen für häufige Probleme",{"title":462,"searchDepth":687,"depth":687,"links":1132},[1133,1135,1146,1147,1148,1149,1150],{"id":474,"depth":1134,"text":475},2,{"id":508,"depth":1134,"text":509,"children":1136},[1137,1138,1139,1145],{"id":528,"depth":687,"text":529},{"id":581,"depth":687,"text":582},{"id":634,"depth":687,"text":635,"children":1140},[1141,1143,1144],{"id":653,"depth":1142,"text":654},4,{"id":716,"depth":1142,"text":717},{"id":766,"depth":1142,"text":767},{"id":800,"depth":687,"text":801},{"id":833,"depth":1134,"text":834},{"id":862,"depth":1134,"text":863},{"id":981,"depth":1134,"text":982},{"id":1026,"depth":1134,"text":1027},{"id":1102,"depth":1134,"text":1103},"Wenn ein CDN oder eine WAF LIVCK-Checks blockiert -- hier lernst du, wie du LIVCK sauber freigibst, ohne dein Ziel angreifbar zu machen.","md",{},null,{"title":101,"description":1151},"pBv0sLvOJY-dotkeISIRlCx4uCQ7NzA8UfcTmlbR4VQ",1784953293808]