3 ms·
Is there a reason Cloudflare can't send a 429/403 in that situation if you're already using it as a middleperson? It seems like responding to a bot and respond
by danShumway 5y ago
Is there a reason Cloudflare can't send a 429/403 in that situation if you're already using it as a middleperson?
It seems like responding to a bot and responding to an unpaid accidental request would take the same amount of energy from Cloudflare. The only difference is that a repetitive unpaid request is probably easier to detect.
- derefr 5y agoOh, they totally can, but you have to get Cloudflare to be your auth gateway (using e.g. https://www.cloudflare.com/en-ca/teams/access/ https://www.cloudflare.com/en-ca/teams/access/ .) Usually companies who have this problem already have an auth system in place and well-ossified (i.e. with customers who’ve burned assumptions about it into software like mobile apps, that can’t be “forced” to update.) So it’s pretty hard to do a migration.