Comment by CircleSpokes

>They are the front-end webserver receiving the request and sending the response.

When providing ddos protection they are mostly filtering out the attacks then forwarding traffic to the customers back end server. That describes 'transit' pretty well.