Rate Limit 100 per hour

For our map locator we have a .ashx handler that could be requested several times in a minute by actual guests. However, we have been hit with attacks where the handler is only requested every 15 seconds but it continues for hours. We’d like to set a limit of 100 or even a few hundred requests per hour. Is that possible?

Update: I just found this:

Time period

Once a client exceeds the threshold specified in the time period, the rule will trigger. The periods available, by plan, are:

  • 1 second or 1 minute (Free and Pro)
  • 1 second, 1 minute, or 10 minutes (Business)
  • Any period between 1 second and 1 hour (Enterprise)

I’ve heard that you have flexibility if you use the API to set your rate limit. Like custom time periods and custom hits per time period.

https://api.cloudflare.com/#rate-limits-for-a-zone-create-rate-limit

1 Like

Interesting. I’ll look into that.

This topic was automatically closed after 30 days. New replies are no longer allowed.