Rate Limiting: Delivering more rules, and greater control
May 21, 2018Alex Cruz Farmer
Summary
Introduced new challenge actions (JavaScript Challenge, Google reCAPTCHA) for Rate Limiting, allowing for more nuanced traffic management beyond simple blocking. Added dynamic scalability for Rate Limiting by enabling matching on Origin Response Headers. Provided detailed examples and tiered rule configurations for protecting against credential stuffing, enumeration attacks, and content scraping.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack