Protecting Project Galileo websites from HTTP attacks

This post details the security events observed on Project Galileo websites between April 23, 2019, and May 23, 2019, showcasing the effectiveness of Cloudflare's security features. It quantifies the number of requests blocked by the WAF (over 4.5 million, matching over 130 rules), highlights the daily occurrence of malicious traffic on most sites, and illustrates the impact of WAF rules with heat maps. It also describes DoS mitigation, including Layer 3/4 blocking and Layer 7 protection by Gatebot (blocking over 1.6 million requests). Specific examples of Firewall Rules, Access Rules, and Zone Lockdown are provided, demonstrating their application in blocking specific IPs, filtering POST requests for WordPress sites, challenging visitors by country, and restricting access to admin panels. Rate Limiting is shown protecting a donation page, and the Security Level feature's role in mitigating 25% of blocked requests is emphasized. The post concludes by reinforcing the comprehensive and automated nature of Cloudflare's security for Project Galileo customers.