I implemented a pretty simple but super effective rate limiting based on this blog post: https://www.nginx.com/blog/rate-limiting-nginx/ Basically: It works great. However, recently I tried Cloudflare, and this doesn’t protect me anymore. I can bring down the site myself with a simple command of: What’s happening? Answer ab -k -c 1000 -n 10000 site.com/ is running 1000 requests in parallel, until