If you use Cloudflare, you can block the traffic before it goes to your server. Blocking at the application-level (with XenForo) doesn't really take strain off your server if it's a true DDoS attack because the application layer is doing the blocking and the full stack is running for each request. Better to block it at the network level than the application level.
If you use Cloudflare, you can block the traffic before it goes to your server. Blocking at the application-level (with XenForo) doesn't really take strain off your server if it's a true DDoS attack because the application layer is doing the blocking and the full stack is running for each request. Better to block it at the network level than the application level.
Thank you, that is what our hosting has done. But it locks out at least one legitimate members, so we are looking at moderation of first posts, etc. Or limit the number of words for new members first few posts? etc.