Cloudflare blocking Render bots even with custom rules
I'm using a bot hosted on Render to make requests to my API, which is behind Cloudflare.
I’ve created a custom WAF rule that matches the User-Agent and path, and set it to "Skip Super Bot Fight Mode", but requests are still being blocked with a Managed Challenge (403).
Please advise why the custom rule is being ignored, or how to properly bypass Bot Fight Mode for this bot.
1 Reply
Support AI
According to the documentation, the issue is likely due to the fact that Bot Fight Mode checks are not implemented in the Ruleset Engine, whereas Super Bot Fight Mode rules are. As a result, skipping Super Bot Fight Mode does not affect Bot Fight Mode.
As stated in the documentation (https://developers.cloudflare.com/bots/get-started/bot-fight-mode/), "You cannot bypass or skip Bot Fight Mode using the Skip action in WAF custom rules or using Page Rules."
To bypass Bot Fight Mode, you may want to consider using Super Bot Fight Mode instead, as mentioned in the documentation. However, please note that this requires a different setup.
Alternatively, you can try creating an IP Access rule that matches the IP address of your bot, as Bot Fight Mode cannot trigger if an IP Access rule matches the request (https://developers.cloudflare.com/bots/get-started/bot-fight-mode/).
Sources
Feedback
Feedback has been submitted! Thank you :)
This is an AI generated response, it may not be 100% accurate. Please validate the output. You can ask followups by replying to this message or mentioning me.