I’m facing a huge DDoS attacks and after enabling “under attack mode” my website was running properly. But my API is not working now showing challenge also on my API URL, now I’m buying the cloudflare pro plan but I wanna know is under attack mode manageable for any page or URL in pro plan. Currently I’m on free plan
You can use Configuration Rules to set the security level for specific incoming requests so you can, for example, not use UAM for the subdomain of your API…
If the “Under Attack” mode is enabled, it remains active and was not disabled for my page smmpakpanels.com/api. Additionally, if I create a subdomain like api.smmpakpanels.com, attackers might target this subdomain as well.
You can create a configuration rule for that URL that uses a high security mode instead of UAM.
Attackers can target any subdomain or URL where you lower the protection. If you don’t want to use UAM, you will need to use more targeted WAF rules instead, follow this guide…