XF 2.3 My site is dealing with 70,000 guests which I'm assuming are mostly bots

Use security rules on cloudflare too to block rogue countries, llm scrapers, and certain URI strings that contain "style-variation" (if only using a single theme on your site).

Thats a good starting point.
 
How do I do this with Cloudflare? My sites are on the Zenfor0 cloud, do I have to ask them to do it or is there something that I can do on my own?
 
How do I do this with Cloudflare? My sites are on the Zenfor0 cloud, do I have to ask them to do it or is there something that I can do on my own?
I'm on Xenforo Cloud hosting too and signed up with Cloudflare a few days ago. You can just create an account yourself and set it up. I started with blocking countries and that alone brought traffic down to normal levels pretty quickly. I am gradually learning how to set other things. Just taking one step at a time, monitor the effects, then move to the next.
 
How do I do this with Cloudflare? My sites are on the Zenfor0 cloud, do I have to ask them to do it or is there something that I can do on my own?
I am on cloud too.

You do not need to xfer your domain to cloudflare, but you could if you wanted to.
But the free version of cloudflare gives you the ability to use their services by pointing your domain nameservers at your registrar to point to cloudflare nameservers. Easy peasy.

Everything works there after the change resolves. But you do not need to move your domain there. (unless you want the cheapest rates in town with the fastest resolvers)
 
Get behind Cloudflare asap and enable all their anti-bot features.

See how that goes and then look at the next steps. Ive found using https://xenforo.com/community/resources/xf-bot-guard.10508/ alongside Cloudflare turnstile, when already behind Cloudflare seems to really hit them hard.

Just wanted to say, thank you for the mention for my add-on, @Slavik! For those who don't know - I used to write undetectable bots for my employers over many years... I am now putting that knowledge to detecting and hitting bots on the head with this 100% free add-on. :)
 
Solutions?
Read this thread as it has been discussing this issue in deep detail for months:

 
I am on cloud too.

You do not need to xfer your domain to cloudflare, but you could if you wanted to.
But the free version of cloudflare gives you the ability to use their services by pointing your domain nameservers at your registrar to point to cloudflare nameservers. Easy peasy.

Everything works there after the change resolves. But you do not need to move your domain there. (unless you want the cheapest rates in town with the fastest resolvers)

How long would they be downtime depending on how I set this up? I'm worried if I transfer my domain or start to point the name server somewhere else that the site won't work until it catches up around the world.
 
I cant say as propagation, although fast, may in some cases take up to 24 hours. But honestly so far from my experience, if you change the nameservers (as faq's at cloudflare explain) at your registrar to use cloudflare nameservers, it begins to resolve in seconds. But that is not representative of how the worlds DNS reacts to the change).

In all fairness, I use cloudflare as my registrar though, so I cant speak of how fast or slow nameserver changes alone will propagate from other registrars. But since I have xferred all my domains to cloudflare as a registrar, any dns changes I make are almost immediate resolved.
 
How long would they be downtime depending on how I set this up? I'm worried if I transfer my domain or start to point the name server somewhere else that the site won't work until it catches up around the world.
If you shorten the TTL of the name server entry a couple of days before the switch down to a couple of minutes there won't be a relevant downtime for most people after switching. There may always be a couple of sleepy or over caching name servers, but usually it is not a huge issue.
 
Just wanted to say, thank you for the mention for my add-on, @Slavik! For those who don't know - I used to write undetectable bots for my employers over many years... I am now putting that knowledge to detecting and hitting bots on the head with this 100% free add-on. :)
Report those employers for unethical business!

Joking.
Or am I?

Good job though, glad to see you're on the good side this time and contributing to it.
 
@MattW

A bigger Xenforo install I frequent is getting hit hard.
I THINK they are on Xenforo cloud.
has been hit lately with bots 40,000 bots 3500 members online.

Would you be able help this site as a paid gig ?
Anyone else ?

They have perpetual problems. Moving to XF Cloud hasn't been a panacea.
 
@MattW

A bigger Xenforo install I frequent is getting hit hard.
I THINK they are on Xenforo cloud.
has been hit lately with bots 40,000 bots 3500 members online.

Would you be able help this site as a paid gig ?
Anyone else ?

They have perpetual problems. Moving to XF Cloud hasn't been a panacea.

I could be hired to setup cloudflare / fail2ban if you need help.
A lot of companies hire me for cybersecurity and web development.

Otherwise, this thread would be a good place to hire a nerd:
https://xenforo.com/community/threads/crazy-amount-of-guests.233649/
 
Joking.
Or am I?

Yeah, I hear you. I could make excuses - you know, it was for competitive intelligence / price scraping / all fair in love, war, and business... but it wasn't my job to make the excuses :P

Good job though, glad to see you're on the good side this time and contributing to it.

Thanks! Feel free to try it out and provide feedback. There is still a long roadmap to go... and this space is a never-ending battle. But it's already proving quite effective.
 
Back
Top Bottom