OpenAPI Schema Validation
Enforces strict structural compliance for JSON/XML request bodies against uploaded OpenAPI 3.0/3.1 specs.
F5 Distributed Cloud API Protection
F5 Distributed Cloud API Protection secures REST and GraphQL APIs by enforcing positive security models, validating payloads against OpenAPI (Swagger) specifications, and discovering shadow or undocumented endpoints.
API Inspection Engine
Section titled “API Inspection Engine”+-------------------------------------------------------------------------+| API Security Inspection Pipeline || || API Client Request || | || v || +-------------------------------------------------------------------+ || | Authentication & Token Inspection (JWT / OAuth2 / API Key) | || +---------------------------------+---------------------------------+ || | || v || +-------------------------------------------------------------------+ || | OpenAPI Schema Conformance: Path, Query, Header, Body Validation | || +---------------------------------+---------------------------------+ || | || v || +-------------------------------------------------------------------+ || | Sensitive Data Masking & PII Redaction | || +---------------------------------+---------------------------------+ || | || +--------------------------+--------------------------+ || | Valid Payload | Invalid || v v || +-----------------------------+ +---------------------+ || | Forward to API Microservice | | HTTP 400 Bad Request| || | Origin Pool | | (Schema Violation) | || +-----------------------------+ +---------------------+ |+-------------------------------------------------------------------------+Core Capabilities
Section titled “Core Capabilities”Shadow API Discovery
Passively observes traffic to identify unmanaged or rogue endpoints and parameter drift.
Granular Rate Limiting
Applies per-endpoint, per-user, or per-IP token bucket rate limits to prevent brute-force abuse.
Sensitive Data Scrubbing
Automatically detects and redacts credit card numbers (PCI-DSS), SSNs, and private tokens.