Attacking by DDoS in my express/api application
mantistc
PROOP

2 years ago

We're experience a high amount of request and our application is down. We're trying a bunch of middlewares, but, nothing is working right now.

13 Replies

mantistc
PROOP

2 years ago

45918766-340c-4a98-9d7a-5a8871ce694a


2 years ago

Do you still have Under Attack Mode on in Cloudflare? That would explain why your app is down.


mantistc
PROOP

2 years ago

Hello, yeah but, how can we mitigate this Attack without using the attack mode?


2 years ago

Is the high amount of requests targeted or are they just bots? How is the attack negatively affecting your service?


mantistc
PROOP

2 years ago

yeah, is targeted request, yesterday i was consoling all the logs and like a thoused of thousend of request was entering in a second in the service, and then, the service was unavailable because was saturated


mantistc
PROOP

2 years ago

we're right now testing a lot of things with cloudflare


2 years ago

That would be the way to go. Railway does not provide any native protection


2 years ago

Cloudflare should be more than enough


mantistc
PROOP

2 years ago

right now we put this two rules, we're monitoring:

1247311323755446500
1247311324136865800


2 years ago

Are both your frontend and backend hosted on Railway? If they are, they can communicate with each other using private networking so your backend doesn't have to be exposed to the internet


mantistc
PROOP

2 years ago

oh.. i see, our front is hosted in Vercel


mantistc
PROOP

2 years ago

but, dunno if u can recommend us some rules/config we can put in cloudflare with our current setup


2 years ago

that's not always true, it would only be true for ssr apps, apps that are csr would need to use the public network


Loading...