How to skip DDos rules/alerts when load testing a website api url?

Website, Application, Performance
1

What is the name of the domain?

example.com

What is the issue you’re encountering

DDos alerts/emails when load testing

What are the steps to reproduce the issue?

I am trying to load test my website api using apache ab tool. When I was doing the load testing, I received DDos alert email for DDos attack (because of the load testing). How can I skip the DDOS ruleset when doing load testing ? What config to use in cloudflare dashboard ? Can I allowlist based on IP addresses OR http headers (multi IP load testing) OR query params OR any other way this can be accomplished in cloudflare ?

2

Load test directly against your backend and not proxied records

1 Like
3

Yes, doing the load testing with direct IP address of the server with host hdr.

Cloudflare ddos email alert mentioned some steps to disable ruleset but that was too complex for temp testing like this.

4

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.