Configuring Cloudflare WAF, Rate Limiting, and DDoS Mitigation Rules
Protect websites and public API endpoints from malicious scraper bots, Layer 7 HTTP floods, and credential stuffing.
En esta página
Website & WordPress guías
With Orange Cloud active, incoming web traffic is scrubbed at Cloudflare's global edge. Custom WAF rules and Rate Limiting inspect requests in flight, blocking Layer 7 application assaults before touching host infrastructure.
Open the domain card
Opens the domain and Cloudflare card for your selected service in the panel.
- Opens the domain card in the service overview
Si tienes un servicio de Clodo, puedes ir directamente a la pestaña del panel correspondiente. Esta tarjeta no cambia nada en tu servicio.
Cloudflare Edge WAF & Layer 7 Scrubbing Pipeline
Step-by-step scrubbing sequence intercepting malicious requests at the global edge.
Inbound Web Requests
Legitimate users, indexing spiders, and malicious scanners.
Cloudflare Anycast Edge
Volumetric L3/L4 floods are absorbed at the Cloudflare edge closest to the source, before traffic reaches the origin.
WAF & Bot Fight Mode
Drops SQL injection, XSS vectors, and automated headless scrapers.
Rate Limiting Engine
Prompts Turnstile challenge to IPs exceeding 60 requests per minute.
Clodo Origin Node
Requests that pass the filters reach your server. As long as your origin IP stays hidden, an attacker cannot bypass this step.
1. Top 3 Defensive WAF Rules#
Kural 1: Login Brute-Force Korumasi
If: (http.request.uri.path contains "/wp-login.php" or http.request.uri.path contains "/api/auth/login")
Then: Managed Challenge (Cloudflare Turnstile)
Kural 2: Bilinen Tehlikeli Tehdit Skorlari
If: (cf.threat_score gt 14)
Then: Interactive Challenge
Kural 3: Rate Limiting (Aşırı İstek Engelleme)
Eşik: 10 saniyede 50'den fazla istek atan IP'leri 1 saat boyunca Block et.¿Cómo implementar esto?
Clodo Control Panel Quick Method
Cloudflare IntegrationThe Cloudflare integration in the Clodo panel creates the DNS records and origin rule for you when you attach a domain; you then enable the WAF rules from the Cloudflare dashboard.
Ejecución paso a paso:
- 1Authorize your Cloudflare account from the Domain card on the service detail page.
- 2Pick your zone; a proxied CNAME record and origin rule are created for you and your origin IP stays behind the proxy.
- 3Enable WAF, Bot Fight Mode and rate limiting from the Cloudflare dashboard using the steps in this guide.
¿Te ha resultado útil esta guía?
Los comentarios van directamente al equipo que mantiene esta guía.
¿No encontró una solución?
Puede abrir una solicitud al equipo de soporte desde el panel.