Search Setup for Free

Cloudflare Developers•11mo ago

which, if your site is worth protecting with a captcha, is going to happen

which, if your site is worth protecting with a captcha, is going to happen

Cloudflare Developers banner

Cloudflare Developers Join

Welcome to the official Cloudflare Developers server. Here you can ask for help and stay updated with the latest news

83,498Members

View on Discord

Resources

Similar Threads

Was this page helpful?

Product

Pricing Docs Communities

Resources

About Blog Changelog Contributors

Legal

Terms Privacy Cookies EULA

Twitter GitHub Discord

© 2026 Hedgehog Software, LLC. All rights reserved.

© 2026 Hedgehog Software, LLC

Twitter GitHub Discord

More

Communities Docs About Terms Privacy

valkyrie_pilot

Vvalkyrie_pilot which, if your site is worth protecting with a captcha, is going to happen

Dubz

D

Dubz•2/24/25, 12:40 AM

That's honestly a poor way of looking at it tbh. Captchas are widely used everywhere to help combat spam, not hacks. Not that users can't do anything nefarious, but it's all a cat and mouse game.

Dubz

D

Dubz•2/24/25, 12:44 AM

I say poor way to look at it because it gives similar reasoning to small businesses and non profits not taking their InfoSec seriously because they're not worth going for, which is tge exact reason that makes it worth going for. Easy food. Most malicious attackers don't care where the money comes from, just that they get it. Why chase a $100B company you'll probably never get any inside info in when you can get a few 5-7 figures companies and get you rolling for long term funding to keep getting those same small fishies? Sure, it's not a "big score", but it all adds up.

Dubz

DDubz I say poor way to look at it because it gives similar reasoning to small busines...

valkyrie_pilot

V

valkyrie_pilotOP•2/24/25, 1:18 AM

hm? im saying that it shouldn’t be your only layer of protection, and that not having a captcha shouldn’t allow malicious people to do Bad Things

Dubz

D

Dubz•2/24/25, 1:21 AM

I may have misinterpreted what you were saying. My apologies , my fault

sachin gupta

S

sachin gupta•2/24/25, 4:55 AM

Hello Everyone,

’ve configured a Cache Rule in Cloudflare, but it doesn’t seem to be working as expected. I’d appreciate any guidance on troubleshooting the issue.

Crazy Vapor

C

Crazy Vapor•2/24/25, 7:30 AM

Hello everyone,

Should CloudFlare hide the ECS as the Subnet, that would be great, because ECS is still exposed.

Marcin7711

M

Marcin7711•2/24/25, 8:57 AM

Pomożecie jak wygramy dam wam trochę kasy,ok!Idziemy na full

Anay-208

D

D5•2/24/25, 9:53 AM

Maybe you have a compromised router or IoT device

Anay-208

AAnay-208 Device has an antivirus. Router I dont think because I haven’t noticed anything ...

D

D5•2/24/25, 9:57 AM

The router could be performing a DDoS without you noticing

Anay-208

AAnay-208 Umm let me login into my router panel. Anything which I should check there?

D

D5•2/24/25, 9:59 AM

If it's not one from your ISP, you should make sure it's updated

Anay-208

AAnay-208 there isn't any option to update

D

D5•2/24/25, 11:52 AM

No idea. Could be that the IP is in a blacklist or something

D

D5•2/24/25, 12:10 PM

Having a BYOIP address requires having a 1k+ enterprise plan?

Isaac McFadyen

I

Isaac McFadyen•2/24/25, 12:22 PM

Correct, BYOIP is ent-only.

Isaac McFadyen

I

Isaac McFadyen•2/24/25, 12:22 PM

And generally it's more than $1k

John Spurlock

J

John Spurlock•2/24/25, 12:23 PM

I see the latest Syntax is all about CF...

https://syntax.fm/show/879/fullstack-cloudflare

Fullstack Cloudflare - Syntax #879

Overview of using Cloudflare Workers and associated services to build fullstack applications

Isaac McFadyen

IIsaac McFadyen And generally it's more than $1k

D

D5•2/24/25, 12:40 PM

Then I'm 100% forced to leave CF :emoti_cry:
I hope the blockings end soon so I can come back

Guilherme J. Akrouch

G

Guilherme J. Akrouch•2/24/25, 2:11 PM

Anyone still having issues with R2 file downloads? Is that issue resolved?

Anay-208

AAnay-208 why "forced" tho?

D

D5•2/24/25, 2:24 PM

They are blocking Cloudflare here during football matches, so I can't have downtime all weekends during 8h in some big ISPs

D

D5•2/24/25, 2:25 PM

BYOIP could solve the issue, but I can't pay 1k

Anay-208

AAnay-208 Not exactly, but similar case for me. I'm not able to submit forms in my OWN si...

D

D5•2/24/25, 2:26 PM

Well, at least it's only happening to you. Not my case, it's affecting hundreds of users

Anay-208

AAnay-208 ya, if I were you, I would have migrated without a second thought. For my curre...

D

D5•2/24/25, 2:28 PM

The problem is that there's not any comparable alternative to Cloudflare with similar price, performance, etc.

D

D5•2/24/25, 2:29 PM

So I need to setup my own WAF and "trust" the hosting provider DDoS protection that is worse than the Cloudflare one

Anay-208

AAnay-208 If I were you, I'd just host my app on AWS, and get a cloudfront dedicated ip, w...

D

D5•2/24/25, 2:31 PM

I can't pay 600$/month plus additional AWS charges

D

D5•2/24/25, 2:33 PM

Mainly because AWS gives you nothing for that price compared to other providers

Anay-208

AAnay-208 host in aws ec2 + get a static ip attach to load balancer and rely on AWS shield...

D

D5•2/24/25, 2:36 PM

Maybe I will do a load balancer to a non-aws platform and use AWS as a proxy

D

D5•2/24/25, 2:36 PM

But the main thing I don't understand, is why Cloudflare (supposedly) isn't blocking the illegal content to avoid all that headache?

Anay-208

AAnay-208 There is a manual review requires to remove the illegal content, which cloudflar...

D

D5•2/24/25, 2:39 PM

Well, I submitted some requests and they attended them. Slow, but made it.

Anay-208

AAnay-208 If I’m right, some cloudflare ips are blocked from a ISP which is making your do...

D

D5•2/24/25, 2:40 PM

From multiple ISPs during football matches hours that are not using IPv6 so my domain is inaccessible from there.

D

D5•2/24/25, 2:41 PM

From what I understand the affected providers are the ones using IPv4 as those IPs are shared with a lot more websites

Similar Threads

Protecting a Workers Static Assets site with Cloudflare Access

CDCloudflare Developers / workers-and-pages-help

Site under DDos attack Try complete captcha to continue

CDCloudflare Developers / general-help

Captcha vs. downloading information from the site

CDCloudflare Developers / general-help