HTTP DDoS Attack Cloudflare Recommended Setting

[PC_Repair]

Does anyone have a standard rule for HTTP DDoS attacks or even block URL that’s not even there?
Can you be protected before the attack happens on your website?
A standard rule for HTTP DDoS attacks?

[CreatorRevealed]

to prevent DDOS attacks, the best setting in Cloudflare is to enable BOT fight mode

[PC_Repair]

Is this it:

Cloudflare Security Settings

Adjust the basic security level to modify which visitors Cloudflare will limit from visiting your website. A low-security setting will prevent only the most threatening visitors from accessing your site. A high-security setting will block all visitors that have exhibited threatening behaviour within the last 14 days. Essentially off will act only against the most grievous offenders. We recommend starting out at low.

I’m Under Attack Mode should only be used when a site is having a DDoS attack. Visitors will see a processing page for about five seconds while we analyze the traffic and behaviour to make sure it is a legitimate human visitor trying to access your site.

The medium setting I take it?

[fritex]

@PC_Repair

The medium setting I take it?

I would recommend Medium, yes.

Nevertheless, this screenshot you provided does not look familiar to me and it seems to me like it’s not form the official Cloudflare dashboard, rather from some interface of Cloudflare integration partner?

@PC_Repair

Can you be protected before the attack happens on your website?

Yes, kindly consider reading below articles and review the available security options:

• https://support.cloudflare.com/hc/en-us/articles/115002059131-Understanding-your-site-protection-options

• https://support.cloudflare.com/hc/en-us/articles/200170196-Responding-to-DDoS-attacks

• https://support.cloudflare.com/hc/en-us/articles/200170166-Best-Practices-DDoS-preventative-measures

• https://support.cloudflare.com/hc/en-us/articles/200172676-Understanding-Cloudflare-DDoS-protection

Therefore, some Firewall Tips are published here :

• Search results for ‘[FirewallTip] in:title #tutorials’ - Cloudflare Community

There are Firewall Rules which could help you to block user-agents, crawlers, etc., there are few I would recommend to add to your Firewall Rules , like the posted here:

Top 50 user agents to block

Here’s a list from the perishablepress.com 7G .htaccess firewall: (360Spider|acapbot|acoonbot|ahrefs|alexibot|asterias|attackbot|backdorbot|becomebot|binlar|blackwidow|blekkobot|blexbot|blowfish|bullseye|bunnys|butterfly|careerbot|casper|checkpriv|cheesebot|cherrypick|chinaclaw|choppy|clshttp|cmsworld|copernic|copyrightcheck|cosmos|crescent|cy_cho|datacha|demon|diavol|discobot|dittospyder|dotbot|dotnetdotcom|dumbot|emailcollector|emailsiphon|emailwolf|exabot|extract|eyenetie|feedfinder|flaming|…

Top 50 user agents to block

Good list, thanks. I have deployed that but removed python and demon (those seem to block some RSS feedreaders, YMMV). What I also have in place is this: (http.user_agent contains “SemrushBot”) or (http.user_agent contains “AhrefsBot”) or (http.user_agent contains “DotBot”) or (http.user_agent contains “WhatCMS”) or (http.user_agent contains “Rogerbot”) or (http.user_agent contains “trendictionbot”) or (http.user_agent contains “BLEXBot”) or (http.user_agent contains “linkfluence”) or (http.us…

Help Needed Please To Exempt Google Bots From Firewall Rules

There’s a list of ASN belongs to hosting providers:

I would also recommend to take a look at the below article:

Mitigating an HTTP DDoS Attack manually with Cloudflare

This guide is for those users of Cloudflare who experience medium-high level complexity DDoS attacks. Continue reading if you want to accomplish the following: Becoming more familiar with the Cloudflare Dashboard and crafting custom firewall rules. Understanding the standard behavior of DDoS attacks and deploying effective firewall rules. Realizing how powerful and valuable Cloudflare Firewall Rules are. I initially thought of making a more complex guide (I will). However, I realized that no…

Make sure your DNS records are proxied so Cloudflare could protect you.

[PC_Repair]

Ok thank you it’s siteground, I will update my guide Web Firewall Protection regarding Page Rules soon