Cloudflare blocks all requests to my API, thinking it's a DDoS attack


I have a PageRule configured for my REST API, in the following way:

Everything works fine this way, however, if I change my Security Level setting to “I’m Under Attack” any calls made to the API are being blocked by Cloudflare DDoS Protection.

What could be the issue?


you need to disable “I am under attack” mode to any api routes…

You can use “Disable Security” in the page rule to disable that altogether.

This topic was automatically closed after 30 days. New replies are no longer allowed.