Cloudflare blocks all requests to my API, thinking it's a DDoS attack

[bales]

Hi!

I have a PageRule configured for my REST API, in the following way:

Everything works fine this way, however, if I change my Security Level setting to “I’m Under Attack” any calls made to the API are being blocked by Cloudflare DDoS Protection.

What could be the issue?

Thanks

[boynet2]

you need to disable “I am under attack” mode to any api routes…

[sandro]

You can use “Disable Security” in the page rule to disable that altogether.