Configuring Cloudflare WAF, Rate Limiting, and DDoS Mitigation Rules
Protect websites and public API endpoints from malicious scraper bots, Layer 7 HTTP floods, and credential stuffing.
Sur cette page
Website & WordPress guides
With Orange Cloud active, incoming web traffic is scrubbed at Cloudflare's global edge. Custom WAF rules and Rate Limiting inspect requests in flight, blocking Layer 7 application assaults before touching host infrastructure.
Open the domain card
Opens the domain and Cloudflare card for your selected service in the panel.
- Opens the domain card in the service overview
Si vous avez un service Clodo, vous pouvez aller directement à l'onglet du panneau concerné. Cette carte ne modifie rien sur votre service.
Cloudflare Edge WAF & Layer 7 Scrubbing Pipeline
Step-by-step scrubbing sequence intercepting malicious requests at the global edge.
Inbound Web Requests
Legitimate users, indexing spiders, and malicious scanners.
Cloudflare Anycast Edge
Volumetric L3/L4 floods are absorbed at the Cloudflare edge closest to the source, before traffic reaches the origin.
WAF & Bot Fight Mode
Drops SQL injection, XSS vectors, and automated headless scrapers.
Rate Limiting Engine
Prompts Turnstile challenge to IPs exceeding 60 requests per minute.
Clodo Origin Node
Requests that pass the filters reach your server. As long as your origin IP stays hidden, an attacker cannot bypass this step.
1. Top 3 Defensive WAF Rules#
Kural 1: Login Brute-Force Korumasi
If: (http.request.uri.path contains "/wp-login.php" or http.request.uri.path contains "/api/auth/login")
Then: Managed Challenge (Cloudflare Turnstile)
Kural 2: Bilinen Tehlikeli Tehdit Skorlari
If: (cf.threat_score gt 14)
Then: Interactive Challenge
Kural 3: Rate Limiting (Aşırı İstek Engelleme)
Eşik: 10 saniyede 50'den fazla istek atan IP'leri 1 saat boyunca Block et.Comment implémenter cela ?
Clodo Control Panel Quick Method
Cloudflare IntegrationThe Cloudflare integration in the Clodo panel creates the DNS records and origin rule for you when you attach a domain; you then enable the WAF rules from the Cloudflare dashboard.
Exécution étape par étape :
- 1Authorize your Cloudflare account from the Domain card on the service detail page.
- 2Pick your zone; a proxied CNAME record and origin rule are created for you and your origin IP stays behind the proxy.
- 3Enable WAF, Bot Fight Mode and rate limiting from the Cloudflare dashboard using the steps in this guide.
Ce guide vous a-t-il été utile ?
Les retours sont directement transmis à l'équipe qui maintient ce guide.
Vous n’avez pas trouvé de solution ?
Vous pouvez ouvrir une demande auprès de notre équipe d’assistance depuis le panneau.