Attacking by DDoS in my express/api application
mantistc
PROOP

2 years ago

We're experience a high amount of request and our application is down. We're trying a bunch of middlewares, but, nothing is working right now.

13 Replies

mantistc
PROOP

2 years ago

45918766-340c-4a98-9d7a-5a8871ce694a


adam
MODERATOR

2 years ago

Do you still have Under Attack Mode on in Cloudflare? That would explain why your app is down.


mantistc
PROOP

2 years ago

Hello, yeah but, how can we mitigate this Attack without using the attack mode?


adam
MODERATOR

2 years ago

Is the high amount of requests targeted or are they just bots? How is the attack negatively affecting your service?


mantistc
PROOP

2 years ago

yeah, is targeted request, yesterday i was consoling all the logs and like a thoused of thousend of request was entering in a second in the service, and then, the service was unavailable because was saturated


mantistc
PROOP

2 years ago

we're right now testing a lot of things with cloudflare


adam
MODERATOR

2 years ago

That would be the way to go. Railway does not provide any native protection


adam
MODERATOR

2 years ago

Cloudflare should be more than enough


mantistc
PROOP

2 years ago

right now we put this two rules, we're monitoring:

1247311323755446500
1247311324136865800


adam
MODERATOR

2 years ago

Are both your frontend and backend hosted on Railway? If they are, they can communicate with each other using private networking so your backend doesn't have to be exposed to the internet


mantistc
PROOP

2 years ago

oh.. i see, our front is hosted in Vercel


mantistc
PROOP

2 years ago

but, dunno if u can recommend us some rules/config we can put in cloudflare with our current setup


brody
EMPLOYEE

2 years ago

that's not always true, it would only be true for ssr apps, apps that are csr would need to use the public network


Loading...