I tried to get to our website an hour ago and found it down [image] this looks like an attack to me, how we can stop, cloudflare is a good option for such a scenarios but that service is not suitable for discourse, please advise.

[image] Corsterix: I use cloudflare with multiple Discourse installs, it works perfectly fine. You can use Cloudflare as DNS and a cache for /uploads, but if any of their caching or “optimisation” features are touching the page then you’re completely unsupported here. There are a long list o…

I have no reverse proxy, in fact i use cloudflare but to manage the dns as the team here recommended to keep the cloud gray.

You need to determine what’s causing the nginx rate limit to kick in. If your Discourse is correctly configured the only reason you should see that message is if there are a large number of users sat behind a single IP. Cloudflare can’t do anything to mitigate that kind of traffic either. Discourse…

From what you have said, it looks like your computer is what is making too many requests. You should look at the logs in /var/discourse/shared/standalone/log/var-log/nginx/ to look for clues.

I have no idea but really big problem, this things is happening almost every 10 minutes. :cry::cry:

Is it happening to anyone but yout?

Developing story: i asked a friend of i he used some kind of software to send many requests to my website, he sent like 3000 requests in 15 seconds and the problem occurred. the thing is everybody with same software can take down our website like that. so the idea here is how we can prevent this …

[image] Jay91: i asked a friend of i he used some kind of software to send many requests to my website, he sent like 3000 requests in 15 seconds and the problem occurred. That’s what is supposed to happen. If he floods the site with requests, he, and only he, gets the “Too many requests” noti…

Yes sir, i know that he did it because he is authorized, but how about somebody can do the same and flood the website all day long ? just to prevent us from reaching our website, what is the solution ? is this something related to server ability ? we are using 8Gb server with 4CPUs !!

[image] Jay91: but how about somebody can do the same and flood the website all day long ? If they flood the web site, they will get that 429 message so that they will not be able to continue to flood your site. Just like it did for him. The server isn’t giving him that message because you “a…

Best free option to protect discourse from many requests

Support Self-hosting

Jay91 (Jay Abie) April 4, 2019, 12:02am 25

This one is no longer working right ? - to activate the cloudflare ?

Topic		Replies	Views
Discourse & Cloudflare Self-hosting	49	5133	January 26, 2024
Using Discourse with Cloudflare: Best Practices Self-Hosting how-to , cloudflare	27	4777	March 20, 2026
429 too many requests Self-hosting	6	2771	April 19, 2023
Cloudflare or plugins breaking my Discourse instance? Support	20	2349	June 9, 2020
Only allow Cloudflare IPs for Discourse server Self-hosting	18	3742	June 21, 2023

Best free option to protect discourse from many requests

Related topics