API Documentation

Web Application API Protection

Implement an HTTP to HTTPS redirect

If you’re looking to implement an HTTP to HTTPS (SSL) redirect for your web application, you can now enable a feature directly on the load balancer instead of configuring it on your server. This significantly improves redirect performance and reduces the load on your servers. To implement this change, you must be on the main […]

Web Application and API Protection Quick-Start Guide

Total Uptime’s Web Application and API Protection (WAAP) is an extremely powerful tool to protect web applications at the edge of the Internet as opposed to right inside your datacenter. The WAF shields your network and applications from the ever increasing number of application-layer attacks and can also aid with compliance, like PCI, by helping […]

Creating Servers/Devices using a FQDN

In the version 3.10 release of our cloud platform, we introduced support for creating back-end devices (servers) using a Fully Qualified Domain Name (FQDN) instead of an IP address. While it is always best to use an IP address instead of a domain name, there are some instances where a FQDN is the only option, […]

SSL Error: Could not create certificate-key pair

If you’re attempting to create a certificate key-pair and have received the message shown below, there is usually one common remedy: The remedy is to run your key through OpenSSL using the RSA key processing tool to change it to the traditional SSLeay compatible format. And yes, to immediately answer our critics: we do support […]

Block access to directories or pages on a website with Deny URL in the WAF/WAAP

Often we’ll receive a request from a customer for assistance blocking a specific directory or page on their site from public access. For example, suppose you run WordPress and you want to prevent someone from going to the /wp-admin/ directory. Or perhaps you want to restrict the site from loading if they simply enter the […]

Prevent X-Forwarded-For Spoofing or Manipulation

When using an inline proxy like our ADC-as-a-Service or Web Application and API Protection service, you’ll often want to know the original client IP address for security, to track in your logs for stats or for other reasons. In our KB article entitled Getting the original client IP with X-Forwarded-For in your code, we’ve already discussed […]

Creating an Active-Active VPN Tunnel with BGP in Azure

In this article we will outline the steps required to create an active-active VPN tunnel with BGP dynamic routing between Microsoft Azure and the Total Uptime Cloud Platform. By default, Total Uptime requires your devices (servers) to have internet-routable IPv4 or IPv6 addresses so we can direct traffic to them. By creating VPN tunnels between […]

Creating an Active-Active VPN Tunnel with BGP in AWS

In this article we will outline the steps required to create an active-active VPN tunnel with BGP dynamic routing between Amazon Web Services (AWS) and the Total Uptime Cloud Platform. By default, Total Uptime requires your devices (servers) to have internet-routable IPv4 or IPv6 addresses so we can direct traffic to them. By creating VPN […]

Cipher Groups

Here is a list of the ciphers in each group available for use in our networking tools. These are subject to change, so please check back periodically. Last updated June 27, 2019 As of 12/16/2019, to achieve a Grade A with the SSL Labs test, you need to choose cipher group High or MAX. Low […]

Can I bring my own IPs / can you announce my subnets?

The answer is yes! Periodically we’re asked if customers can announce their own IP space / subnets on our platform. The answer is yes. We will need an LOA (Letter of Authorization) for your IP space, and it will need to be registered with any of the RIRs (Regional Internet Registries) like ARIN, RIPE, etc. […]