Advanced rate limiting rule

Website, Application, Performance Security
1

What is the name of the domain?

acmeticketing.net

What is the issue you’re encountering

advanced rate limiting rule configured with same characteristics as IP uses ClientIP?

What steps have you taken to resolve the issue?

advanced rate limiting rule configured with same characteristics as IP uses ClientIP? There are situations where other than end user IP’s, sometimes server to server communication also occurs when this happens we do not want to block the access. how to over come this limitation?

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

Set up a advanced rate limiting rule with url pattern matching and same characteristics as IP with 5 requests in 2 minutes. Rule works as expected for end user IP’s but we do not want this to block the server to server communication ie., exclusion of certain IP’s. How to overcome this exclusion rule?

2

Rule works as expected for end user IP’s but we do not want this to block the server to server communication ie., exclusion of certain IP’s. How to overcome this exclusion rule?

If there are a specific set of IPs then you can create a custom rule with an action of skip for rate limiting.

Alternately you could add to these IPs to your rate limiting rule, with something like, and Source IP does not equal the IPs you want allowed.