I tried to get to our website an hour ago and found it down [image] this looks like an attack to me, how we can stop, cloudflare is a good option for such a scenarios but that service is not suitable for discourse, please advise.

[图片] Corsterix: I use cloudflare with multiple Discourse installs, it works perfectly fine. You can use Cloudflare as DNS and a cache for /uploads, but if any of their caching or “optimisation” features are touching the page then you’re completely unsupported here. There are a long list of C…

I have no reverse proxy, in fact i use cloudflare but to manage the dns as the team here recommended to keep the cloud gray.

You need to determine what’s causing the nginx rate limit to kick in. If your Discourse is correctly configured the only reason you should see that message is if there are a large number of users sat behind a single IP. Cloudflare can’t do anything to mitigate that kind of traffic either. Discourse…

From what you have said, it looks like your computer is what is making too many requests. You should look at the logs in /var/discourse/shared/standalone/log/var-log/nginx/ to look for clues.

I have no idea but really big problem, this things is happening almost every 10 minutes. :cry::cry:

Is it happening to anyone but yout?

Developing story: i asked a friend of i he used some kind of software to send many requests to my website, he sent like 3000 requests in 15 seconds and the problem occurred. the thing is everybody with same software can take down our website like that. so the idea here is how we can prevent this …

[图片] Jay91: i asked a friend of i he used some kind of software to send many requests to my website, he sent like 3000 requests in 15 seconds and the problem occurred. That’s what is supposed to happen. If he floods the site with requests, he, and only he, gets the “Too many requests” notice …

Yes sir, i know that he did it because he is authorized, but how about somebody can do the same and flood the website all day long ? just to prevent us from reaching our website, what is the solution ? is this something related to server ability ? we are using 8Gb server with 4CPUs !!

[图片] Jay91: but how about somebody can do the same and flood the website all day long ? If they flood the web site, they will get that 429 message so that they will not be able to continue to flood your site. Just like it did for him. The server isn’t giving him that message because you “auth…

Best free option to protect discourse from many requests

支持安装

Jay91 (Jay Abie) 2019 年4 月 4 日 00:02 25

This one is no longer working right ? - to activate the cloudflare ?

话题		回复	浏览量
Discourse & Cloudflare Self-hosting	49	5028	2024 年1 月 26 日
Using Discourse with Cloudflare: Best Practices Self-Hosting how-to , cloudflare	27	4594	2026 年3 月 20 日
429 too many requests Self-hosting	6	2749	2023 年4 月 19 日
Cloudflare or plugins breaking my Discourse instance? Support	20	2298	2020 年6 月 9 日
Only allow Cloudflare IPs for Discourse server Self-hosting	18	3719	2023 年6 月 21 日

Best free option to protect discourse from many requests

相关话题