Traffic filtering is performed by the Curiefense proxy, as shown in the first diagram above. In other words, this is where the security policies defined in the Configurations are enforced.

Some activities (such as rate-limiting) require local data storage. Internally, Curiefense uses Redis for this.