From Dev.to
Shared WAF Limits vs Path-Specific Limits: How to Choose Enforcement Placement
A login endpoint, a search page, and a static asset directory rarely have the same traffic pattern. Applying one request threshold across all three can create a difficult tradeoff: tolerate expensive...