How to know if a website is using Google Cloud Armor?

[aurora13666]

I'm writing a web crawler and I don't wanna scan websites using Cloud Armor.

Is there anything in servers using Cloud Armor that makes them distinct from the rest of the public web-facing Google Cloud products? Like a distinct DNS PTR record, TLS SNI indicator, HTTP header or something.

[Marvin_Lucero]

Hi @aurora13666 ,

As per documentation, Google Cloud Armor mainly focuses on securing web applications through features like DDoS protection, a Web Application Firewall (WAF), and access control policies. However, the feature that you're looking for, such as whether there are special DNS PTR records, TLS SNI indicators, or unique HTTP headers linked to servers protected by Cloud Armor, might not be publicly shared or standardized as of the moment.

Hopefully this answers your question.

[aurora13666]

---

@Marvin_Lucero wrote:

Hopefully this answers your question.

---

It obviously didn't.