I have a personal website running using react-router v7 in framework mode, deployed via Cloudflare Workers.
Typically, I receive 100-500 requests per day. However, in the last few days, I got over 12.5k requests from just two different IP sources within roughly 3 hours.
According to the Security > Analytics dashboard, 99% of the requests should be mitigated or cached by Cloudflare. Yet, when I checked the Workers dashboard, nearly all requests were billed.
I have two questions:
1. How can I resolve the caching issue so that not all requests are billed?
2. How can I block requests like GET '/admin/.env' so they are blocked and not billed?