I used Cloudflare's waf and created several rules to allow only a few countries to access, deny access to old browsers, and started hosting rules. Although the defense was successful, my website was also. Therefore, the response is very slow. Ddos takes up a lot of the IP speed assigned to me by Cloudflare. How should I optimize it to prevent attacks?

  • 1
    For a large, distributed DOS attack, one of the few defenses is to increase your bandwidth. Filtering works until the attacker finds what you are filtering and evade it.
    – ThoriumBR
    Mar 31 at 13:31
  • Optimise Cloudflare? What exactly do you want? This is missing some details. Is the DDoS hitting your Cloudflare WAF or your site? Are the DDoS rules working? How are you expecting to optimise something?
    – schroeder
    Mar 31 at 21:23

1 Answer 1


First, inform your Hoster about the incident. They might help you the fastest.

If the attacker still has your real IP, Cloudflare couldn’t save you from attacks. Change the IP that has been attacked and proxy the new publicly unknown IP only over Cloudflare.

It is possible to get your real IP over DNS traces your server leaves on public DNS. So avoid the publication of your IP if you want security through Cloudflare.

  • 1
    This is making some assumptions that I'm asking about in the comments. Maybe wait until some details emerge before narrowing in on specific solutions.
    – schroeder
    Apr 1 at 14:21

Not the answer you're looking for? Browse other questions tagged .