Apache-Hosted Websites: Why You Need Bot Detection & Protection

The Apache HTTP Server has been a top web server for 20 years. It is part of the commonly used LAMP stack—Linux, Apache, MySQL, and PHP—for delivering web applications. Many of the world’s most visited websites run on Apache, including Facebook, Netflix, Target.com, and NASA.

DataDome’s Apache module integrates seamlessly with Apache-based websites to provide expert bot detection and protection with minimum installation time and latency. This article will guide you through a basic explanation of how the module works and how to get started using it.

How the DataDome Module for Apache Works

DataDome is a good solution if you’re looking to add bot detection to your mobile app. Protecting your websites, mobile apps and APIs against malicious bot traffic is a complex task. A good bot protection solution for must be able to distinguish between real human beings, good bots, and bad bots in real time.

DataDome is a SaaS bot protection solution which integrates seamlessly with any web infrastructure, thanks to a range of server-side modules. Like all DataDome modules, the Apache module requires no changes to your architecture.

Once installed, the DataDome module analyzes every request to your servers. Before the Apache process runs, the module makes a call to the DataDome API using a keep-alive connection. Depending on the API response, the module will either block the query or let Apache continue the regular process.

DataDome’s regional endpoints are distributed around the globe using auto-scaling to ensure minimal latency and high availability.

The DataDome dashboard will show all bot activity. We use artificial intelligence and machine learning to make decisions on how to handle each bot. You will receive notifications whenever you are under attack, but you don’t have to do anything. The solution runs on autopilot.

However, should you wish to, you can create your own rules specifying how to handle specific bots. You may, for example, wish to present a given bot with a Captcha, rather than just blocking it. You can also use the rate limiting and/or time boxing features to manage the activity of partner bots.

We fully understand how critical a positive user experience is, so the Apache module is designed to protect it. If any errors were to occur during the process, or if the timeout was reached, the module will automatically disable its blocking process and allow those hits. The timeouts for new connections and reused connections can be individually customized to meet specific requirements.

Key Benefits

By leveraging the DataDome bot protection module for Apache, you can expect:

• Expert bot detection fully integrated into Apache.
• AI and machine learning-driven intelligent bot detection, differentiating bots from humans and good bots from bad, and blocking all bad bot traffic with zero impact on legitimate users.
• Improved site performance, thanks to the elimination of high volumes of illegitimate traffic.
• Real-time protection (< 2 milliseconds) from price scraping, DDoS attacks, credential stuffing, and all other OWASP automated threats.
• Unmatched customization options, thanks to the powerful custom rules engine.
• More dependable analytics, thanks to data that reliably distinguishes humans from bots.

Getting Started With the DataDome Apache Module

To start testing DataDome with Apache today, take a minute (literally) to create your account for a free trial. You don’t need a credit card.

Then, follow the Apache module installation instructions in our technical documentation. It takes just a few simple steps:

• Ensure that HTTPD headers and libssl files and libraries are installed on your target system.
• Download the Apache module.
• Compile.
• Add the DataDome configuration file.
• Edit the configuration file as described in the instructions.
• Test the configuration.
• Restart Apache.

You will then be able see DataDome working in real time! Go to your personal DataDome dashboard and observe all bot traffic to all of your vulnerability endpoints.