The Imperva WAF uses DNS redirection to attract all traffic that is intended for the protected network. This enables it to absorb excessive requests and identify abnormal traffic. Approved traffic is then forwarded to the protected server over a VPN.