3 ms·
> But it's possible to hit this button again and re-enable Cloudflare forwarding temporarily if we find ourselves under attack, so I figure this is a good optio
by eli 6y ago
> But it's possible to hit this button again and re-enable Cloudflare forwarding temporarily if we find ourselves under attack, so I figure this is a good option.
Plan to redeploy your production server to a new IP address too since the attacker will still be able to hit it directly.
- Waterluvian 6y agoCan you not just reject or ignore all connections not coming from cloud flare? Or does that still do damage during a ddos?
- jgrahamc 6y agoThat doesn't help if your pipe to the Internet is full (think Gbps) or if the router/switch can't process packets fast enough (think Mpps).
- matteocontrini 6y agoConsidering that the website the articles refers to is hosted on DigitalOcean, in this case the problem would be DigitalOcean's DDoS policy, which is basically null route the IP traffic for 4 hours or so when an attack is detected.