Files
dotfiles/dot_agents/skills/cloudflare/references/ddos/README.md
T
Prad Nukala 6406208b35 shell: fish functions -> ~/.local/bin executables + bash/zsh ports; manage ~/.agents
- 16 cross-shell utilities converted to sh/bash chezmoi executables:
  ai c2p cp-appid extract_agents fab gdc gh-sonr-org-migrate ghg-clone
  ghn gho git-summary launch_omp_livediff_overlay lc-elir mdcp mdp pj
  (ghg-clone not named ghg: unrelated cargo binary owns that name)
- cwd/history helpers stay per-shell: yy c cd clip-last + ghg/ghn/gho
  cd-wrappers in bash/functions/ and zsh/functions/, loaded by rc files
- fish keeps only shell-state functions; converted ones now hit PATH
- cp-appid ignore gating moved to .local/bin path
- dot_agents/skills: 82 skills materialized from dotstate storage so
  dot_claude skill symlinks resolve on fresh bootstrap; dotstate
  profile/symlinks.json released .agents/skills .bashrc .zshrc
2026-08-10 15:15:06 -04:00

2.0 KiB

Cloudflare DDoS Protection

Autonomous, always-on protection against DDoS attacks across L3/4 and L7.

Protection Types

  • HTTP DDoS (L7): Protects HTTP/HTTPS traffic, phase ddos_l7, zone/account level
  • Network DDoS (L3/4): UDP/SYN/DNS floods, phase ddos_l4, account level only
  • Adaptive DDoS: Learns 7-day baseline, detects deviations, 4 profile types (Origins, User-Agents, Locations, Protocols)

Plan Availability

Feature Free Pro Business Enterprise Enterprise Advanced
HTTP DDoS (L7) ✓ ✓ ✓ ✓ ✓
Network DDoS (L3/4) ✓ ✓ ✓ ✓ ✓
Override rules 1 1 1 1 10
Custom expressions ✗ ✗ ✗ ✗ ✓
Log action ✗ ✗ ✗ ✗ ✓
Adaptive DDoS ✗ ✗ ✗ ✓ ✓
Alert filters Basic Basic Basic Advanced Advanced

Actions & Sensitivity

  • Actions: block, managed_challenge, challenge, log (Enterprise Advanced only)
  • Sensitivity: default (high), medium, low, eoff (essentially off)
  • Override: By category/tag or individual rule ID
  • Scope: Zone-level overrides take precedence over account-level

Reading Order

File Purpose Start Here If...
configuration.md Dashboard setup, rule structure, adaptive profiles You're setting up DDoS protection for the first time
api.md API endpoints, SDK usage, ruleset ID discovery You're automating configuration or need programmatic access
patterns.md Protection strategies, defense-in-depth, dynamic response You need implementation patterns or layered security
gotchas.md False positives, tuning, error handling You're troubleshooting or optimizing existing protection

See Also

  • waf - Application-layer security rules
  • bot-management - Bot detection and mitigation