Rate Limiting: Live Demo
Sep 30, 2016Timothy Fong

Summary
Introduced Cloudflare Rate Limiting, a feature to control traffic based on request rates per client IP address, cookie, or other attributes. The post details configuration options including URL patterns (with wildcards), threshold (requests per minute), action (block/simulate), timeout, and response body type/content. It also mentions potential future enhancements like specifying methods, response codes, headers, and cookies, and extending mitigation options to CAPTCHA.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack