Hello,

DevRel from Google here :)

I had a look at your article. Our of curiosity what's your company requirement that make you have to deploy NGFW in front of Cloud Run. It feels a bit counter-intuitive that you have to run a serverlfull platform to security a serverless one.

Have looked at Cloud Armor with Google Cloud Load Balancers as an alternative ? Cloud Armor does have some WAF functionalities.