DDOs Attacks on CF Pages

Cloudflare Pages is likely the best alternative to Vercel as Vercel attempts to charge $40 per extra 100gb of bandwidth, however I am curious on how Bundled Requests work. If any DDos Attacks leak from my configuration, will it affect my daily bundled requests limit?
34 Replies
Hello, I’m Allie!
If they aren't blocked, you will be billed. Note though that you may be able to contact support and get a refund if an attack does occur.
! Julius Cole
! Julius ColeOP2y ago
I believe even you can see how much it devalues the service. It's like how Cloudflare used to charge rate-limiting on requests.
Hello, I’m Allie!
Not really. With a well-tuned block rule, you should be well prepared to handle most attacks(which you won't be billed for). And I think it is pretty generous that CF might refund you if you miss an attack Just to be clear, if the WAF blocks the DDoS attack, you don't pay
Walshy
Walshy2y ago
If you used Functions and they got past ddos mitigation yes but we will help out with that.
! Julius Cole
! Julius ColeOP2y ago
No clue if I use functions, but theoritically can't someone just hit the Pages domain bypassing your domains WAF
Walshy
Walshy2y ago
You can lock down the Pages domains But if you aren't using Functions, it isn't a worry anyway Are you doing SSR?
! Julius Cole
! Julius ColeOP2y ago
nope
Walshy
Walshy2y ago
Alright you're good then
! Julius Cole
! Julius ColeOP2y ago
How lmao Access Policy?
Walshy
Walshy2y ago
Yes
! Julius Cole
! Julius ColeOP2y ago
Any guide on how to
! Julius Cole
! Julius ColeOP2y ago
Well for some reason I am getting bundled requests despite not using functions bruh
Walshy
Walshy2y ago
But if you aren't using Functions then there isn't even a possibility of being charged for anything (we charge for Functions since they're server side compute) You could get hit with 100 mil requests, it'd just be free
! Julius Cole
! Julius ColeOP2y ago
maybe it's bots visiting one of my old sites
Walshy
Walshy2y ago
Ok well you are using functions then haha
! Julius Cole
! Julius ColeOP2y ago
What consitutes as a function Using Workers? or having it poll my api
Walshy
Walshy2y ago
Functions are Workers
! Julius Cole
! Julius ColeOP2y ago
My backend isn't on workers I'll look into it?
! Julius Cole
! Julius ColeOP2y ago
Hell, CF Pages won't even work rn
! Julius Cole
! Julius ColeOP2y ago
I put this flag and wouldn't work My developer was meant to go to #pages-help but yk he's being stubborn
! Julius Cole
! Julius ColeOP2y ago
🤷‍♂️
Walshy
Walshy2y ago
It's not an env var It's a compatibility flag
! Julius Cole
! Julius ColeOP2y ago
Oh
Walshy
Walshy2y ago
next-on-pages is for SSR'd Next.js so that would be using Functions So yeah ok, I'd recommend Accessing the pages.dev (https://developers.cloudflare.com/pages/platform/preview-deployments/#customizing-preview-deployments-access)
! Julius Cole
! Julius ColeOP2y ago
So I have to use SSR on Next
! Julius Cole
! Julius ColeOP2y ago
Deadass cannot find this
Walshy
Walshy2y ago
Click this, go through the flow and then just scroll down a little
! Julius Cole
! Julius ColeOP2y ago
thanks Does CF Pages support next w/ client Prefer not to use SSR
Walshy
Walshy2y ago
Assuming you mean client side? I can't see why not, it's just JS ran on a browser, nothing to do with the host
! Julius Cole
! Julius ColeOP2y ago
mhm ight There is no limit to requests when it comes to static I know that Client likely not either as it's client 💀 so good Prefer not to pay for CF Workers 🤷‍♂️ Can you only lockdown preview deployments?
Cyb3r-Jak3
Cyb3r-Jak32y ago
You can use access in front of any domain that you have
Want results from more Discord servers?
Add your server