#community-help

Setting Up Cloudflare for DDoS Protection

TLDR Lukas sought advice on using Cloudflare for protection against DDoS and abuse. Jason guided them through the setup process, including IP-based blocking.

17mo

Join the chat

May 04, 2022 (18 months ago)

Photo of md5-d9deaf8d1683beb47108307453fe58bc

Lukas

01:17 PM

Hello, in terms of protection from ddos and any other abuse, what would I have to do? I know that cloudfare could help me, but what do I have to do exactly?

Photo of md5-8813087cccc512313602b6d9f9ece19f

Jason

01:25 PM

Here's how you setup cloudflare: https://typesense-community.slack.com/archives/C01P749MET0/p1643993514137789?thread_ts=1643992951.867889&cid=C01P749MET0

Once that's done it's pretty much handled by Cloudflare from that point

May 17, 2022 (17 months ago)

Lukas

08:57 AM

Jason How do I set up IP-based blocking? It seems that Cloudfare has so many services, where do I navigate? is it “api shield”?

Jason

03:20 PM

Lukas It's under Security -> WAF and then you add a Firewall Rule

Typesense

Lightning-fast, open source search engine for everyone | Knowledge Base powered by Struct.AI

Indexed 2779 threads (79% resolved)

Join Our Community Manage subscription

Similar Threads

DDoS Protection for Typesense Cloud using Cloudflare

Nikhil requested a feature to restrict Typesense Cloud hostname/IP access, with only Cloudflare access allowed. Jason acknowledged and stated that IP-based restriction is planned.

2mo

Validating Client Side Search Adapter Effectiveness and Tips

Keith asked Jason about enumeration attacks and IP blocking. Jason suggested using Cloudflare for IP-blocking, using limited API keys, and shared a method to proxy through Cloudflare to Typesense. Keith also shared a resource about Cloudflare workers.

21mo

Monthly Cloud Product Billing and Usage Concerns

gab asked about monthly billing, usage restrictions, and potential security for the Typesense Cloud product. Kishore Nallan and Jason addressed these concerns, detailing how to control usage limits, avoid potential overcharges and suggested using Cloudflare DNS CNAMEs for DDOS protection. Bruno advised to use paging.

28mo