I thought that it was probably achieved by setting the DNS to a value under the jurisdiction of the cloud WAF provider, and by inserting a kind of proxy in the middle of the
