Try our new research platform with insights from 80,000+ expert users

AWS WAF vs Fastly comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
AWS WAF
Average Rating
8.0
Reviews Sentiment
7.6
Number of Reviews
59
Ranking in other categories
Web Application Firewall (WAF) (1st)
Fastly
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
7
Ranking in other categories
CDN (7th), Web Application Firewall (WAF) (19th), Distributed Denial-of-Service (DDoS) Protection (12th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Kavin Kalaiarasu - PeerSpot reviewer
AWS's cloud-native security simplifies rule enforcement but needs better DDoS integration
The dashboarding could be improved, and the default metrics provided by AWS WAF could be upgraded. The rate at which AWS updates their managed rule sets could be better. Features like bot protection or DDoS mitigation, available with other WAF vendors, do not come natively with AWS WAF. Instead, they are part of AWS Shield. Providing DDoS protection as part of their WAF solution would be beneficial.
Nick Wilsdon - PeerSpot reviewer
An easily scalable and stable product that provides exceptional support
The product should provide improved bot detection and management. The product should also provide support for code management. Everybody working in CDN is currently looking for ways to better manage code deployment with various authorization levels and synchronization with our lower environments. Matching up what's happening in CDN with what's happening on the origin regarding testing would always be useful.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like Cloudflare's application gateway and DDoS protection."
"The most valuable feature is its usability."
"It's a great product because it's scalable, has great coverage, and is mature with good defenses against DDoS attacks."
"Even when there is a high load on our servers, Cloudflare is able to cache the data and serve it to users, ensuring they can still access the website."
"I get a lot of value from Cloudflare's API because it enables you to build a separate environment inside the solution. You can create a domain for performing test requests before you move to the production environment and connect various domains."
"The features of Cloudflare were found to be more beneficial and led to the decision to utilize it over other options."
"Centralized, full-featured DNS."
"From what I've seen so far, there are no negatives to report as of yet"
"AWS WAF is very easy to use and configure on AWS."
"The interface is good."
"It's simple, easy to use."
"AWS WAF acts as a barrier, analyzing HTTP communications between external users and web applications."
"The solution is stable."
"AWS WAF is something that someone from a cloud background or cloud security background leverages. If they want to natively use a solution in the cloud, AWS WAF comes in handy. It's very useful for that, and the way we can fine-tune the WAF rules is also nice."
"We can host any DB or application on the solution."
"As a basic WAF, it's better than nothing. So if you need something simple out of the box with default features, AWS WAF is good."
"Fastly uses configuration versioning, where you can deploy a new version in less than one minute."
"Support is good; the product works as advertised. We have a Slack connection with them. So we can basically ask for help, live, engage, and ring when they respond. Very quickly."
"The product's initial setup phase is straightforward."
"Its initial setup process is straightforward."
"Compute@Edge features are valuable to me."
"Rate limiting is a good feature that protects from volumetric attacks."
"The product helps our organization to access sites located in different regions quickly."
 

Cons

"The analytics, basically the dashboard, doesn't have much to it."
"There might be helpful if there was some web application firewall feature."
"One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"The reporting can definitely be improved to offer a lot more explanation on something that may have happened or has actually happened."
"Cloudflare could be improved by introducing a mid-tier pricing option."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"Eventually, things go sideways and require fixes when it would have been easier to prevent the issue initially."
"AWS WAF would be better if it uses AI or machine learning to detect a potential attack or a potential IP that creates an attack even before it happens. I want AWS WAF to capture the IP and automatically write the rule to automate the entire process."
"I would like to see the addition of more advanced rate-limiting features in the next release. It would be beneficial to extend rate limiting beyond just web servers to the main node level."
"The cost management has room for improvement."
"The rate at which AWS updates their managed rule sets could be better. Features like bot protection or DDoS mitigation, available with other WAF vendors, do not come natively with AWS WAF."
"For now, there is no feature to protect against attack of the bad bots"
"The solution is cloud-based, and therefore the billing model that comes with it could be more intuitive, in my opinion. It's very easy to not fully understand how you tag things for billing and then you can quite easily run up a high bill without realizing it. The solution needs to be more intuitive around the tagging system, which enables the billing. Right now, I have a cloud architect that does that on our behalf and it isn't something that a business user could use because it still requires quite a lot of technical knowledge to do effectively."
"They have to do more to improve, to innovate more features. They need to increase the security. It has to be more active in detecting threats."
"The cost must be reduced."
"The solution's pricing could be better."
"What I don't like about Fastly is that they charge a heavy price."
"The product should provide improved bot detection and management."
"Stronger analytics would be helpful, like showing configurations that haven't served a certain amount of traffic in a while. With many properties, things can get lost track of - duplicates or unused configurations not properly decommissioned."
"Support is not that great."
"Fastly's customer service area needs improvement."
"It is missing a "staging" platform to deploy a test configuration with all of the real settings, which would allow us to properly test before putting it into production."
 

Pricing and Cost Advice

"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"There are no additional costs beyond the standard licensing fees."
"It's a premium model. You can start at zero and work your way up to the enterprise model, which has a very high pricing level."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"The tool is a premium product, so it is very expensive."
"The price is average."
"It's an annual subscription."
"I would rate AWS WAF's pricing a seven out of ten."
"It's quite affordable. It's in the middle."
"The product is moderately priced."
"AWS WAF has reasonable pricing."
"There are no costs in addition to the standard licensing fees."
"The solution is affordable."
"The pricing has been very competitive."
"You need to pay a premium price for the tool."
"In my opinion, Fastly is priced competitively."
"The solution is cheaper than other products in the market."
"It is an expensive solution."
"I've generally found Fastly to be very competitive in pricing, especially around Compute@Edge."
"Fastly is less expensive than one of its competitors."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
861,170 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
10%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
9%
Government
5%
Computer Software Company
17%
Comms Service Provider
9%
Financial Services Firm
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What are the limitations of AWS WAF vs alternative WAFs?
Hi Varun, I have had experienced with several WAF deployments and deep technical assessments of the following: 1. Im...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft...
What do you like most about AWS WAF?
The most valuable feature of AWS WAF is its highly configurable rules system.
What do you like most about Fastly?
Support is good; the product works as advertised. We have a Slack connection with them. So we can basically ask for h...
What needs improvement with Fastly?
What I don't like about Fastly is that they charge a heavy price. The pricing is different per region. If you have a ...
 

Comparisons

 

Also Known As

Cloudflare DNS
AWS Web Application Firewall
No data available
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
eVitamins, 9Splay, Senao International
Twitter, Airbnb, Alaska Airlines, Pinterest, Vimeo, The Guardian, The New York Times, Ticketmaster, The Drupal Association, Opera, about.com, imgur, Etsy, Foursquare, GitHub, New Relic, shopify, Shazam, Firebase
Find out what your peers are saying about AWS WAF vs. Fastly and other solutions. Updated: June 2025.
861,170 professionals have used our research since 2012.