you can set it to Challenge if you are hesitant and want to allow the real humans who are using thos
you can set it to Challenge if you are hesitant and want to allow the real humans who are using those ASNs for whatever reason
Cah opps, yea it is very limited compared to full ent adv. rate limiting lol
Aeh the program i use would fial anyway
E
Asharex
Ebut presumably youre not using one of those ASNs...?
Ealso if you block or challenge google cloud its going to break discord embeds
Aim using hetzner but i have a rule above this one to bypass those ips
E
EMake sure to keep in mind the caveats if Google Cloud is on that list
Aumm
Ai applied
Aand under a second later
A.
Ei would file that under "working as intended"
Ayea
Astill blasting my webserver tho
Aill boot some of the backend servers
EYeah users using datacenter ASNs is quite uncommon, youd see some % on a very high traffic site but I dont imagine it being much more than 0.5-1%
Eassuming its not an api anyway, apis are a whole other story
EYep, rate limits is how I handle api traffic too
Eone of my sites is designed to be consumed by rss readers
EI put like 30 req/min on it
E
Eoh wow, they are for rate limiting. TIL
Ei have another site with a sneaky WAF rule that has a custom response to return 404 for blocks 
ECustom error responses, powered by the Ruleset Engine, allow you to define custom responses for errors returned by an origin server or by a Cloudflare …
Ecustom error responses are very powerful and awesome
Ecompared to the old custom pages stuff
Ayep
Ait wrote like 30gb of request logs so far
Ajust asn
Ashould i add the other
ECorrect, anyone with an orange name does
Every
ESad
ENice
EThis is getting a little #off-topic though
Ais it able to be applied to specific subdomains?
Ai cant have it blocking stuff that doesnt have mozilla and some of those other things
