Worker or not?
Greetings. My website is being DDOSed for more than a week.
I've made several WAF rules using Whitelisted IPs (server IP for API, banks, search networks, partners). If IP is in list - Skip, in other way i have Page Rule that on * enables Under Attack Mode and it works.
Because if i just enable Under Attack Mode API on my website is not working.
But now i have several problems.
1. I've made android app webview of my site and some users cant pass managed challenge using it - it just freezing or something
2. Its annoying for users always pass the challenge
So i've decided to investigate and found info about Workers. I thought that Page Rules and WAF can still work after Worker but with every worker i make - API on my website break...
Firstly i've made Worker which checks X-Requested-with and if it contains my androids apps header - adds IP to whitelist. It worked for 10 minutes and after that API on my website is down again.
Then i decided to move all of my WAF and Page rules to Worker (Add apps IP to whitelist, check for IP in whitelists, check User Agent and in other way enable Security Level: Under Attack Mode) and still after several minutes my API went down.
Really don't know the best solution for it. Hope someone can give me a hint.
Thank you
1 Reply
I'm closing this one as you posted the exact same thing in #workers-help. Please don't do that, as it just wastes time if people try to help in both.