Add ability to control Bot Fight Mode from Cloudflare via Servebolt Control Panel
Danny Albeck
Based on some searching, the CF API appears to allow for this. We would really like the ability to turn this on and off as needed.
Log In
Kevin Kyburz
+1 for point 3.
More insides would be nice to improve stuff. On some site we need to use Turnstile to fight with bad form requests. Seeing a schema would help us to request for more rules, like block countries or IP Adresses. (things ENT Bot Management should do normally)
Thomas Audunhus | Acting CEO | Servebolt
Great to hear your perspective, Danny Albeck! I have a few more questions for you:
- Can you provide more details on how frequently you anticipate needing to turn the Bot Fight Mode on and off?
- Are there specific scenarios or triggers that would prompt you to use this feature?
- Would you find it useful to have notifications or alerts related to the Bot Fight Mode activity?
Danny Albeck
Thomas Audunhus | Acting CEO | Servebolt
Thank you for your attention on this. I will do my best to answer your questions.
- In our particular case we probably need to use it in 2 hour windows. We only want to turn it on when we see major spikes in negative traffic, then disable it when it regulates.
- We have 2 main trigger points. Limit Login Attempts Reloaded, which puts it front and center for us to see how many failed requests and attacks we are getting, as well as fraudulent orders coming in masses, at times seemingly hitting an endpoint to create them in fast succession.
- We "crave" information on the CDN/Security rules side of the equation. Maybe because its so hidden from us, but we want as much insight and detail in to this component. Show us WAF policies active for our domain, show us how many blocked requests, etc. Ideally, if there was an expedited way to get things blocked/enabled/disabled within minutes at all hours of the day would be great.
I would love an ability to have API access to the WAF so we could block our own IP sets, and enable bot mode on and off.
Thank you!