Network Protect glossary
This glossary defines terms used throughout the Fastly Network Protect documentation.
| Term | Definition | |
|---|---|---|
| Firewall rule | Network ProtectA rule that filters a network's traffic before it gets delivered to your infrastructure. Rules match on IP protocol, source and destination addresses, and source and destination ports. Rules are evaluated in order from top to bottom, the first matching rule determines how traffic is handled, and a default action applies to any traffic that doesn't match a rule. | |
| IP list | Network ProtectA named list of IP address prefixes that you can reference in your firewall rules. In addition to the prefix lists you create, your account includes prefix lists you can reference (e.g., Fastly Public IPs, Google Search Crawlers, and the Spamhaus DROP List). | |
| Letter of Authorization (LOA) | Network ProtectA document that authorizes Fastly to advertise an IP address prefix that you own. You must provide an LOA before Fastly can advertise a prefix on your behalf. | |
| Network | Network ProtectAn IP address prefix that you own (e.g., 192.0.2.0/24) and want Fastly to protect with Network Protect. Each network has its own routing policy, firewall rules, and traffic metrics. | |
| Route Origin Authorization (ROA) | Network ProtectA record you create with your Regional Internet Registry (RIR) that authorizes Fastly's Autonomous System Number (ASN) to originate an IP address prefix that you own. The Fastly platform continuously polls for this record. | |
| Routing policy | Network ProtectA set of routes that controls which tunnel Fastly uses to deliver a network's traffic. Each route associates a tunnel with a preference value and a region. | |
| Tunnel | Network ProtectA Generic Routing Encapsulation (GRE) connection that Fastly uses to deliver traffic from Fastly's network back to your infrastructure. Each tunnel has a name and an endpoint IP address on your network. |
