Settings for I'm Under Attack after a DDoS attack

[user10599]

One of our domains have been DDoS-ed before and we are seeing a rise of it on the same domain even on a different IP address.

We turned on I’m Under Attack mode a few times manually because Cloudflare took about 1 hour to pick it up, and then mitigated the attack.

1. So what security level should we keep after we turn off I’m Under Attack mode?

2. What other measures can we take on our Free plan?

[sdayman]

1. “High” would be the natural choice.
2. Mitigating an HTTP DDoS Attack manually with Cloudflare

[jnperamo]

@user10599

What other measures can we take on our Free plan?

If you have a system administrator, they should set up a monitoring system to visualize the data in real-time.
Alternatively (and likely cheaper) is to upgrade to the PRO package. The Pro package doesn’t have many benefits for the automation of DDoS attacks, but the analytics can be convenient, especially if you want to follow the guide I made a while ago.

[user10599]

It’s just me, just starting out.

Can you point me in the direction of your guide?

[jnperamo]

You were linked it earlier , here you have it:

Mitigating an HTTP DDoS Attack manually with Cloudflare

This guide is for those users of Cloudflare who experience medium-high level complexity DDoS attacks. Continue reading if you want to accomplish the following: Becoming more familiar with the Cloudflare Dashboard and crafting custom firewall rules. Understanding the standard behavior of DDoS attacks and deploying effective firewall rules. Realizing how powerful and valuable Cloudflare Firewall Rules are. I initially thought of making a more complex guide (I will). However, I realized that no…

[user10599]

Thanks for letting me know!

[user10599]

Ha ha, I just saw the other reply. Thanks again!