Rate-Limiting Rule with Interactive Challenge Not Triggering

Website, Application, Performance Security
1

What is the name of the domain?

segretolab.com

What is the issue you’re encountering

I have set up a rate-limiting rule that should show the interactive challenge after 5 requests within 10 seconds, but it doesn’t work! It only works with the 429 block. Why? I’m going crazy. When I set the interactive challenge, it works the first time, but if I try again, it no longer shows the CAPTCHA.

What steps have you taken to resolve the issue?

I’ve read that the duration of the completed challenge does not affect WAF rules, but I don’t understand the conflict.

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full (strict)

2

May I ask if you’ve got any Custom WAF Rule which would be in a conflict with your Rate Limitin rule due to the interactive challenge being presented? :thinking:

Were you testing this with each time new Incognito (Private) Window (no cookies saved)?

3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.