Block DDos Traffic

Website, Application, Performance Security
1

What is the name of the domain?

kdsappliances.co.uk

What is the issue you’re encountering

Site constantly being taken down

What steps have you taken to resolve the issue?

Rate limiting
Security - > Bot

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

Site getting taken out despite being behind cloudflare, with thousands of expensive search page requests (and nothing else) in a minute from common pool of IPs from a specific country with wide array of very old and obv fake useragents.

I’ve messed about with security settings but apart from the horrible ‘Site Under Attack’ mode manually being activated I’ve been unable to mitigate.

Any advice welcome?

My plan B is is to remove cloudflare and block the whole country using IP tables.

2

A whole country block/challenge in Cloudflare WAF custom rules will do the same thing. Make sure your origin only allows access from Cloudflare IP addresses.

Check here for a good guide…

3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.