How to turn off DDOS protection on R2?

My cached endpoint is returning cloudflare ddos protection from my application when there is high traffic and it is very annoying. Do I need enterprise?!

Ddwayn My cached endpoint is returning cloudflare ddos protection from my application w...

Chaika•2/17/24, 2:09 AM

If you're talking about an R2 Custom Domain, check Security -> Events and see what service is challenging/blocking the requests, Magic Link: https://dash.cloudflare.com/?to=/:account/:zone/security/events

dwaynOP•2/17/24, 2:22 AM

dwaynOP•2/17/24, 2:22 AM

@Chaika

dwaynOP•2/17/24, 2:22 AM

it's not a ddos...

dwaynOP•2/17/24, 2:22 AM

Over 200 of my users got blocked

dwaynOP•2/17/24, 2:22 AM

from my own application sending myself requests

dwaynOP•2/17/24, 2:22 AM

can i whitelist all ips or something. this is cached on cdn so i have no interest about stopping ddos

dwaynOP•2/17/24, 2:27 AM

@Chaika should i be sending a user agent?

dwaynOP•2/17/24, 2:27 AM

dwaynOP•2/17/24, 2:27 AM

Or does this work?

Ddwayn can i whitelist all ips or something. this is cached on cdn so i have no interes...

Chaika•2/17/24, 2:28 AM

You can lower the sensitivity of Http DDos with an override: https://developers.cloudflare.com/ddos-protection/managed-rulesets/adjust-rules/false-positive/

Cloudflare Docs

Handle a false positive · Cloudflare DDoS Protection docs

A false positive is an incorrect identification. In the case of DDoS protection, there is a false positive when legitimate traffic is mistakenly …

Ddwayn can i whitelist all ips or something. this is cached on cdn so i have no interes...

Chaika•2/17/24, 2:29 AM

you probably should be though yea

dwaynOP•2/17/24, 2:29 AM

It is not 1 false positive.

dwaynOP•2/17/24, 2:29 AM

Even myself got blocked

CChaika you probably should be though yea

dwaynOP•2/17/24, 2:29 AM

How can I do this?

Chaika•2/17/24, 2:30 AM

opps I meant to reply to "should I be sending a user agent"

Chaika•2/17/24, 2:30 AM

The DDoS protection is always on. You can follow that false postive guide to lower the sensitivty

Chaika•2/17/24, 2:33 AM

Based on the Rule ID in that one blocked event, it looks like the specific one flagging you is "HTTP requests with unusual HTTP headers or URI path (signature #61)."

CChaika The DDoS protection is always on. You can follow that false postive guide to low...

dwaynOP•2/17/24, 2:38 AM

How can i turn this ddos protection off. It doesn't work it blocked the creator of the app even

dwaynOP•2/17/24, 2:38 AM

I'm not sending a useragent

dwaynOP•2/17/24, 2:38 AM

is that why

Chaika•2/17/24, 2:38 AM

You can't turn it off. You can only lower the sensitivity of it. Did you follow the false postive guide to deploy an override?

dwaynOP•2/17/24, 2:38 AM

I was thinking of sending a chrome useragent

dwaynOP•2/17/24, 2:39 AM

To circumvent the firewall

Chaika•2/17/24, 2:39 AM

I wouldn't impersonate a browser, I would just send a custom one

dwaynOP•2/17/24, 2:39 AM

can you tell me what headers

dwaynOP•2/17/24, 2:39 AM

cloudflare likes/wants me to send

Chaika•2/17/24, 2:40 AM

I can't, no, I don't know the full list. Obvious ones like impersonating browser user agents/faking them/having empty can cause issues.

Chaika•2/17/24, 2:40 AM

I would go the other way and deploy a ddos override as suggested above. You can target that specific rule and lower the sensitivity

dwaynOP•2/17/24, 2:42 AM

i did deploy a ddos override

dwaynOP•2/17/24, 2:42 AM

and i still got this

dwaynOP•2/17/24, 2:46 AM

do i need enterprise?

dwaynOP•2/17/24, 2:46 AM

i read to disable ddos

dwaynOP•2/17/24, 2:46 AM

i need to get enterprise

dwaynOP•2/17/24, 2:47 AM

Screen_Shot_2024-02-16_at_9.47.25_PM.png

dwaynOP•2/17/24, 2:47 AM

did this accomplish ddos bypass?

Chaika•2/17/24, 2:48 AM

no but I would wager it just needed a second to update if you changed the sensitivity

Chaika•2/17/24, 2:48 AM

the whole ddos pipeline is a complex thing sampling only one out of a thousand requests and such

dwaynOP•2/17/24, 2:48 AM

i already had everything to lowest

dwaynOP•2/17/24, 2:49 AM

sensitivity

dwaynOP•2/17/24, 2:49 AM

weeks ago

Ddwayn i need to get enterprise

Chaika•2/17/24, 2:49 AM

Enterprise can change the action to Log

dwaynOP•2/17/24, 2:49 AM

what does skip mean, my assumption is skip firewall?

Chaika•2/17/24, 2:49 AM

you already had a ddos override, and you could see that specific rule at essentially off sensitivity?

Ddwayn what does skip mean, my assumption is skip firewall?

Chaika•2/17/24, 2:49 AM

just that it matched your custom rule and skipped specific components you selected

CChaika you already had a ddos override, and you could see that specific rule at essenti...

dwaynOP•2/17/24, 2:49 AM

yep

dwaynOP•2/17/24, 2:51 AM

it dazzles me why anybody would care about ddosing

dwaynOP•2/17/24, 2:51 AM

cached cdn files lol

dwaynOP•2/17/24, 2:51 AM

this shouldnt be a thing

Chaika•2/17/24, 2:54 AM

Yea, CF would mitigate it eitherway though because it costs their resources/network stability

How to turn off DDOS protection on R2?

Similar Threads

Similar Threads

Similar Threads