Cloudflare blocks my clients from consuming my API
Cloudflare blocks my clients from consuming my API
17 Replies
Support AI
Hey 👋
It seems there may not be enough information in your post to effectively get support from the community. Please ensure you include as much as possible, you can check the channel guidelines for some examples of what kind of information to include.
This is an AI generated response, it may not be 100% accurate. Please validate the output. You can ask followups by replying to this message or mentioning me.
You can view the rule that caused a block or challenge page to be presented at https://dash.cloudflare.com/?to=/:account/:zone/security/events
I'm watching it and for no reason at all, it puts them in the Bot Fight Mode challenge.
I had to disable it so they can use my API, the bad thing is that this feature applies to all subdomains and therefore I disabled it for all subdomains, apparently Cloudflare's reason for blocking them is because it is an AWS server, a reason that I don't know...
It is an API so it is consumed by fetches.
Of course, I added a rule in the WAF to allow access to requests coming from Data Centers and skipped the rest of the protections but there is no way.
I saw that, which seems strange to me, and to be able to use a more granular equivalent Bot Fight Mode, I need the Enterprise plan?
Bot Fight Mode cannot be skipped by WAF Rules or other "Bypass" actions.
Bot Fight Mode is a very aggressive solution that should only be enabled if you are actively under attack.
Remedies:
- Upgrade to a Paid plan and use Super Bot Fight Mode
- Disable Bot Fight Mode
I think it's overkill to have to contact a sales agent and get into an Enterprise plan just because I want to wrap an API in Cloudflare.
I don't need Enterprise?
Great, I got $5k for startup, the only thing is that they told me that it doesn't appear in my account and I have to calculate it myself, so now I see.
what?
I am not an AI hahaha
I'm passing a screenshot of the conver so you can see that I'm not

Nop
Now I have Cloudflare Pro, I'm going to see.
Where does it appear now?
and the config?
uuu
So, does this feature that I had previously marked now function?

It's strange that it didn't used to get blocked or anything like Pro Plan.
The thing is, in the dashboard, in the bots section, it's still called the same thing, and it's a bit confusing.
Maybe now a user will test it to see if it no longer causes problems.
Does not work


I used Control + F to make sure.


Oh I just saw the error, it looks like you are aplocating the pro plan to another domain.
I don't see the other domain

Okay, now it works. Cancel the other plan and activate this one, and that's it.
Thank you very much, @Leo!