Back in 2017 we gave you Unmetered DDoS Mitigation, here's a birthday gift: Unmetered Rate Limiting for Self Serve customers

Introduced unmetered Rate Limiting for Free, Pro, and Business customers, removing usage-based charges. Launched an updated Rate Limiting engine based on the ruleset engine, offering advanced rule-building capabilities previously available in Advanced Rate Limiting. This includes the ability to combine multiple request parameters (path, host, URI, query, method, user agent, source IP), separate counting and mitigation expressions, and expanded counting dimensions (IP with NAT awareness, Query, Host, Headers, Cookie, ASN, Country, Path, JA3, JSON field).