Challenge everything out of domain?

Hi everyone. I've been using cloudflare for a while, but I've been struggling with an issue. I want to block/challenge any request made to a subset of route of my domain to prevent automated requests as much as possible. let's say my domain is xyz.com I'd like to make sure the routes xyz.com/api/route1 and xyz.com/api/route2 are blocked if any requests are made from outside of my frontend (xyz.com itself) How to do so? I'm guessing it's WAF based, but couldn't figure it out. thanks a lot!
1 Reply
elBotto
elBotto5mo ago
I was thinking maybe on my backend I can "detect" traffic from cloudflare as cloudflare is taking are of delivering my website? Or is it a rule in cloudflare? or both? Any help will be greatly appreciated, thanks!