Why run bot protection at the edge instead of on the server?
Blocking at the edge stops hostile traffic before it consumes origin resources, touches inventory, or fires analytics and ad pixels - protection on the origin filters damage already done.
Detection on the origin means every hostile request was already received, processed, and logged by your infrastructure - and often already recorded in analytics. Edge enforcement turns the origin into a clean room: only verified traffic ever arrives.
The side effects are as valuable as the blocking: smaller origin capacity, accurate analytics (fake sessions never fire pixels), and protection that scales without changes to the commerce platform itself.