Cloudflare blocks all requests to my API, thinking it's a DDoS attack

ddos
#1

Hi!

I have a PageRule configured for my REST API, in the following way:

Everything works fine this way, however, if I change my Security Level setting to “I’m Under Attack” any calls made to the API are being blocked by Cloudflare DDoS Protection.

What could be the issue?

Thanks

0 Likes

#2

you need to disable “I am under attack” mode to any api routes…

0 Likes

#3

You can use “Disable Security” in the page rule to disable that altogether.

0 Likes