how to prevent DDoS attacks ?

[phenomlab]

This might also be useful…

[crazycells]

@phenomlab on a side note, is there any easy way to implement a rule… to allow only two geolocation (countries) but block the access from the rest of the countries?

[phenomlab]

@crazycells yes, but without Cloudflare you’d need to perform more checks to determine traffic origin before you have make a decision as to block or permit.

[crazycells]

@phenomlab yes, we are planning to install Cloudflare again…

We will go with “Pro” version and see how it works, I guess this should help not to have any session errors… Previously, we got many connection problems because of Cloudflare…

[phenomlab]

@crazycells I wouldn’t be so sure. The pro version of Cloudflare is $20 per month but I don’t think that will resolve the connectivity issues.

There also the harm that CF causes to SEO if you use their bot fight mode as I mention here

https://sudonix.org/topic/503/cloudflare-bot-fight-mode-and-google-search

[crazycells]

@phenomlab I have a good news. We set up CloudFlare Pro, and did not have connection problems yet.

As you said, it costs $20/month if you subscribe annually, but we did monthly ($25) since we were not sure if this will work for us. So far everything looks OK. We will also check “Google Search” problem you mentioned as well after we secure our forum. Thanks a lot for this warning!

Unfortunately, we had no choice about Cloudflare since we were getting more than 1 billion connection request from bots and forum was unusable for several hours two consecutive days…

[crazycells]

@crazycells well, of course 1 billion+ requests happened after we installed CF, I do not know how many more we had before installing CF…

[phenomlab]

@crazycells Good news in the short term, but interested to see if this does impact the SEO of your forum. Do you have Bot Fight Mode enabled in CF?

[crazycells]

@phenomlab I actually do not know yet, because I have not found these settings on the CF yet…

Can you please show me how I reach those?

and this is the bot page:

[phenomlab]

@crazycells see the link located at the top right of that screenshot

[crazycells]

@phenomlab lol thanks…

is it “Verified bots”?

[phenomlab]

@crazycells yes, exactly. You want to allow crawlers such as Google bot etc.

[crazycells]

@phenomlab thanks. so, it looks like we are good for now…

is there any other way to verify independently that indexing works ok?

[phenomlab]

@crazycells the only accurate way is to use the URL Inspection Tool

https://support.google.com/webmasters/answer/9012289?hl=en

[crazycells]

@phenomlab thank you very much, this was helpful. Everything looks ok