Can CloudFlare protect me against DDoS attacks?

CloudFlare can help mitigate and protect against many DDoS attacks. If you are having issues with DDoS attacks, here are some quick tips that can help mitigate an attack:

1. Enable CloudFlare's "I'm Under Attack Mode" in your Security Settings. All CloudFlare Plans have this Basic DDoS Protection available in their CloudFlare Security Settings.

Need more advanced DDoS Protection? Please look at CloudFlare's Business and Enterprise plans.

2. If you don't want to enable "I'm Under Attack Mode", because some visitors with JavaScript and Cookies disabled won't be able to access the site, then you can change your Basic Security Level in your CloudFlare settings to High. A 'High' security settings will challenge more visitors coming to your site, and will thwart many visits from a botnet from even hitting your server.

3. If you know which countries are sending most of the bot traffic to your site, you can block them in your CloudFlare Threat Control panel. A block will challenge all visitors from that country, which means only visitors that pass the captcha can enter your site. You also have the option of blocking by individual IP or IP ranges in your Threat Control panel, if desired.

Still not finding what you need?

The CloudFlare team is here to help. 95% of questions can be answered using the search tool, but if you can’t find what you need, submit a support request.