A computer-implemented method executed by one or more processors comprising: in response to determining that the first customer requires additional processing resources, assigning a first web security node in a distributed network to a first customer, the first web security node selected from a set of unassigned nodes that reside in the distributed network and are not assigned to any customer; assigning a second web security node in the distributed network to a second customer, the second web security node selected from the set of unassigned nodes, wherein the second web security node is different than the first web security node and the second customer is different than the first customer; configuring the assigned first web security node to process network traffic only from the first customer by applying a first network policy to the network traffic from the first customer; configuring the assigned second web security node to process network traffic only from the second customer by applying a second network policy to the network traffic from the second customer; receiving, by the distributed network, first network traffic generated by first clients on a first network of the first customer, wherein the first network traffic and data associated with the first customer are isolated from second network traffic generated by the second customer; processing, by the assigned first web security node, first network traffic associated with the first customer, wherein the first network traffic of the first customer is isolated from the network traffic of the second customer, wherein processing the first network traffic associated with the first customer includes selectively performing actions on the first network traffic based on configuration data set at the first network policy at the first web security node for the first customer; processing, by the assigned second web security node, network traffic associated with the second customer, wherein the network traffic of the second customer is isolated from the network traffic of the first customer; determining that a third web security node is required for the first customer in response to increased network traffic; assigning an unassigned node from the set of unassigned nodes as the third web security node to the first customer; and retrieving the configuration data set for the first customer at the first web security node to be stored at the third web security node. in response to determining that the first customer requires additional processing resources, assigning a first web security node in a distributed network to a first customer, the first web security node selected from a set of unassigned nodes that reside in the distributed network and are not assigned to any customer; assigning a second web security node in the distributed network to a second customer, the second web security node selected from the set of unassigned nodes, wherein the second web security node is different than the first web security node and the second customer is different than the first customer; configuring the assigned first web security node to process network traffic only from the first customer by applying a first network policy to the network traffic from the first customer; configuring the assigned second web security node to process network traffic only from the second customer by applying a second network policy to the network traffic from the second customer; receiving, by the distributed network, first network traffic generated by first clients on a first network of the first customer, wherein the first network traffic and data associated with the first customer are isolated from second network traffic generated by the second customer; processing, by the assigned first web security node, first network traffic associated with the first customer, wherein the first network traffic of the first customer is isolated from the network traffic of the second customer, wherein processing the first network traffic associated with the first customer includes selectively performing actions on the first network traffic based on configuration data set at the first network policy at the first web security node for the first customer; processing, by the assigned second web security node, network traffic associated with the second customer, wherein the network traffic of the second customer is isolated from the network traffic of the first customer; determining that a third web security node is required for the first customer in response to increased network traffic; assigning an unassigned node from the set of unassigned nodes as the third web security node to the first customer; and retrieving the configuration data set for the first customer at the first web security node to be stored at the third web security node.