Unmetered Rate Limiting is free now, throwing it on might not be a bad idea (although if it is truly

Unmetered Rate Limiting is free now, throwing it on might not be a bad idea (although if it is truly distributed it might not do too much).
I would make sure they aren't bypassing Cloudflare either (you properly have only allowed CF IPs to connect)

Andy•3/6/23, 2:02 AM

yea they are hitting my webservers only accessible by the domain

Andy•3/6/23, 2:02 AM

and i have the ip logs comming from the cf-connecting-ip header

Andy•3/6/23, 2:02 AM

unless they are manually adding the host and the connecting ip header then they are going over cf

CChaika Unmetered Rate Limiting is free now, throwing it on might not be a bad idea (alt...

Erisa•3/6/23, 2:02 AM

(its not the same as Advanced Rate Limiting, thats still the name for the ent addon that has far more options, the new one for paygo is generally called Unmetered Rate Limiting)

Andy•3/6/23, 2:02 AM

and it shows 310 million logs of blocked traffic so far

Andy•3/6/23, 2:03 AM

so i think its over cf

Original message was deleted

Andy•3/6/23, 2:04 AM

should i just copy all those over

Erisa•3/6/23, 2:04 AM

you can set it to Challenge if you are hesitant and want to allow the real humans who are using those ASNs for whatever reason

EErisa (its not the same as Advanced Rate Limiting, thats still the name for the ent ad...

ChaikaOP•3/6/23, 2:05 AM

ah opps, yea it is very limited compared to full ent adv. rate limiting lol

EErisa you can set it to Challenge if you are hesitant and want to allow the real human...

Andy•3/6/23, 2:05 AM

eh the program i use would fial anyway

Erisa•3/6/23, 2:05 AM

Andy•3/6/23, 2:05 AM

sharex

Erisa•3/6/23, 2:05 AM

but presumably youre not using one of those ASNs...?

Erisa•3/6/23, 2:05 AM

also if you block or challenge google cloud its going to break discord embeds

EErisa but presumably youre not using one of those ASNs...?

Andy•3/6/23, 2:06 AM

im using hetzner but i have a rule above this one to bypass those ips

Erisa•3/6/23, 2:06 AM

Make sure to keep in mind the caveats if Google Cloud is on that list

Andy•3/6/23, 2:06 AM

umm

Andy•3/6/23, 2:06 AM

i applied

Andy•3/6/23, 2:06 AM

and under a second later

Andy•3/6/23, 2:06 AM

Erisa•3/6/23, 2:07 AM

i would file that under "working as intended"

Andy•3/6/23, 2:07 AM

yea

Andy•3/6/23, 2:07 AM

still blasting my webserver tho

Andy•3/6/23, 2:07 AM

ill boot some of the backend servers

Original message was deleted

Erisa•3/6/23, 2:07 AM

Yeah users using datacenter ASNs is quite uncommon, youd see some % on a very high traffic site but I dont imagine it being much more than 0.5-1%

Erisa•3/6/23, 2:08 AM

assuming its not an api anyway, apis are a whole other story

Erisa•3/6/23, 2:09 AM

Yep, rate limits is how I handle api traffic too

Erisa•3/6/23, 2:10 AM

one of my sites is designed to be consumed by rss readers

Erisa•3/6/23, 2:10 AM

I put like 30 req/min on it

Erisa•3/6/23, 2:12 AM

~~and then abused ent privilege to add a custom response~~

Original message was deleted

Erisa•3/6/23, 2:13 AM

oh wow, they are for rate limiting. TIL

Erisa•3/6/23, 2:13 AM

i have another site with a sneaky WAF rule that has a custom response to return 404 for blocks meowlul

Erisa•3/6/23, 2:14 AM

this says pro https://developers.cloudflare.com/rules/custom-error-responses/#availability

Custom error responses (beta) · Cloudflare Rules docs

Custom error responses, powered by the Ruleset Engine, allow you to define custom responses for errors returned by an origin server or by a Cloudflare …

Erisa•3/6/23, 2:15 AM

custom error responses are very powerful and awesome

Erisa•3/6/23, 2:15 AM

compared to the old custom pages stuff

Original message was deleted

Andy•3/6/23, 2:16 AM

yep

Andy•3/6/23, 2:16 AM

it wrote like 30gb of request logs so far

Original message was deleted

Andy•3/6/23, 2:16 AM

just asn

Andy•3/6/23, 2:16 AM

should i add the other

Erisa•3/6/23, 2:17 AM

Correct, anyone with an orange name does

Erisa•3/6/23, 2:18 AM

very

Unmetered Rate Limiting is free now, throwing it on might not be a bad idea (although if it is truly

Similar Threads

Similar Threads

Similar Threads