Cloudflare Rate Limiting - Insight, Control, and Mitigation against Layer 7 DDoS Attacks
Apr 13, 2017Timothy Fong
Summary
This post announces the general availability of Cloudflare's Rate Limiting service to all customers, extending its previous availability to Enterprise customers. It details how Rate Limiting helps mitigate Layer 7 DDoS attacks, brute-force login attempts, and bot scraping by blocking offending IP addresses at the network edge. The post outlines how to enable and configure Rate Limiting through the dashboard, including path-specific rules and HTTP method limitations for Business+ plans. It also introduces a 'simulate' mode for Pro+ plans to test rules before live deployment and mentions upcoming analytics for insights into traffic patterns and rule efficacy.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack