> ## Documentation Index
> Fetch the complete documentation index at: https://datum.net/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# AI Edge

> Datum's AI Edge service is built on Envoy and provides an intelligent HTTPProxy along with a Coraza-based Web Application Firewall (WAF) to help you protect and route internet traffic to your backend services.

<Note>
  **Working with this resource via an AI agent?** Datum publishes three skills covering AI Edge: [AI Edge](/agents/skills/ai-edge) (WAF, auth, and traffic policies), [Client Traffic](/agents/skills/client-traffic) (TLS termination, HTTP/3, connection limits), and [HTTPRoute](/agents/skills/httproute) (path routing, traffic splitting, redirects).
</Note>

Our AI Edge service is built on Envoy and provides an intelligent HTTPProxy along with a Coraza-based Web Application Firewall (WAF).

AI Edges help you protect and route internet traffic to your backend services. We support HTTP(S) 1.1, HTTP2, gRPC, and WebSockets.

<Frame caption="AI Edges can be configured with custom hostnames and protection">
  <img src="https://mintcdn.com/datum-4926dda5/I1l2ab-7rzSROTAw/images/AI-Edge-details.png?fit=max&auto=format&n=I1l2ab-7rzSROTAw&q=85&s=844f29aaf1fcbd0928d773ceff5060e0" alt="AI Edge Details" width="1665" height="677" data-path="images/AI-Edge-details.png" />
</Frame>

## Features

Each AI Edge deploys with a default hostname and enforces HTTPS (you can disable this).

* **Protection** - The [**OWASP Coraza Web Application Firewall (WAF)**](https://www.coraza.io/) provides built-in protection. By default, protection runs in "observe" mode. You can set it to enforced status and select either Level 1 (relaxed) or Level 2 (balanced).
* **Custom Hostnames** – Verify domains (or use already verified domain resources) to use custom hostnames with an AI Edge.
* **Basic Authentication** - Add a username and password to restrict access to an AI Edge.

To monitor the health of your AI Edges, you can use:

* **Status** – View status “Accepted” and “Programmed”, Generated hostname(s), Custom hostname verification status, and TLS verification status.
* **Metrics** - The Datum Cloud portal provides a variety of baseline metrics, filtered by region, including: global upstream latency percentile, regional upstream RPS, and regional upstream response.
* **Activity Logs** - View and filter activity across a project, and filter by resource type (including AI Edge) and action.