Rate Limiting Rules - what order?

Application Security Rate Limiting
1

What is the name of the domain?

What is the error number?

order of how security rules are applied.

What is the issue you’re encountering

Rate Limiting Rule

What steps have you taken to resolve the issue?

I have recently taken action based on some bot traffic that’s being challenged based on a 80/60 rate limiting rule. I created a custom rule challenge based on the originating ASN. Does CF have a sequence for evaluating traffic - rate limiting a priority over custom rules?

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

2

May I ask if you’re asking if Custom rules fire before Rate Limiting Rules (or vice-versa)? :thinking:

Yes there is a Traffic Sequence:

You can test with Trace Tool just in case:

3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.