Firewall
General
Advanced DDoS Protection
- How can I tell if I'm having a DDoS against my site?
- I didn't turn on I'm Under Attack mode, why are some visitors seeing a "Checking your Browser before accessing" message?
- How large of a DDoS attack can Cloudflare handle?
- How do I enable "I'm Under Attack" mode?
- Does Cloudflare offer DDoS protection to Free and Pro plans?
- What does "I'm Under Attack Mode" do?
Settings
Managed Rules - Web Application Firewall (WAF)
- What does the Web Application Firewall (WAF) do?
- Which Cloudflare plans offer the WAF?
- How do I configure the WAF?
- How to create a Custom WAF rule?
- Managing the OWASP rule set in the WAF
- How do I manage the "High" or "Low" sensitivity for OWASP on the WAF?
Firewall Rules
Tools - IP Access Rules
Tools - Rate Limiting
- Cloudflare Rate Limiting
- Configuring Rate Limiting in the Cloudflare Dashboard
- What does "Protect your login" do?
- How do I use Rate Limiting to protect against brute-force attacks?
- How do I use Rate Limiting to protect against DDoS attacks?
- Choosing thresholds for Rate Limiting
Tools - User Agent Blocking
Tools - Zone Lockdown
Firewall FAQ
- What does the Cloudflare _cf_bm cookie do?
- How do I protect my site from malware with Cloudflare?
- Why do I see a captcha or challenge page (Attention Required) trying to visit a site protected by Cloudflare as a site visitor?
- How does Cloudflare know which IPs to challenge?
- What does the Cloudflare cfduid cookie do?
- Will activating Cloudflare stop all spammers or attackers?