Feature request: HTTP return code to control WAF

Website, Application, Performance
1

What is the name of the domain?

n/a

What is the issue you’re encountering

Feature request

What steps have you taken to resolve the issue?

I’d like to return an HTTP return code that Cloudflare will interpret as “block this client for 10 minutes.”
(Similar to how Nginx interprets HTTP 444 as “quietly disconnect the client and let them hang.”)
I’d like to return a code, like “445” that tells Cloudflare that the IP is hostile and the client should be blocked for 10 minutes. (Why 10 minutes? I don’t know why they were attacking/scanning my server, but this cuts off the abuse temporarily. And I can always return it again if they do it again.)

If this functionality already exists, then please point me to usage!
If it doesn’t exist, then I’d like this as a feature request.

1 Like
2

Generally the WAF only works on requests, not responses. If you have an Enterprise plan, you can use rate limiting to limit an IP by counting a particular response code.

Alternatively you could use a Worker with D1/Durable Objects to implement the feature.

1 Like
3

This topic was automatically closed after 15 days. New replies are no longer allowed.