BENEFITS OF RATE LIMITING
Mitigate DDoS attacks
Stop high-precision layer 7 attacks with granular configuration options.
Ensure API availability
Identify abusive traffic with high accuracy by rate limiting traffic based on any parameter of a request.
Protect customer data
Defend against brute force login attacks seeking to take over accounts and steal sensitive information.
Rely on transparent pricing
Avoid unpredictable costs associated with traffic spikes and enumeration attacks. We will not charge you for usage when you are under volumetric attack.
Pick the right option for you
配置阈值
保护您的网站 URL 或 API 端点，阻止超过定义阈值的可疑请求。细粒度的配置选项，包括状态码、特定 URL、请求限制、请求方法等。
定义响应
网站和 API 访问者达到定义的请求阈值可触发自定义的响应，例如缓解操作（质询或 CAPTCHA 验证码）、响应代码（错误 401 -未授权），超时和阻止。
Learn how the Cloudflare connectivity cloud helps secure applications
Gartner® 将 Cloudflare 评为 Web 应用程序和 API 保护领域的“代表性供应商”。
Cloudflare 在 Gartner 的 WAAP 市场指南报告中获评为代表性供应商。我们相信，这一认可充分证明我们能够更快地抵御新出现的威胁，提供多种安全功能的更紧密的集成，易于使用和可轻松部署。
What our customers are saying
“When other companies experienced a data leak, the attackers would often try the stolen email and password combinations on our sites. We always knew when there was another attack, but it was business as usual because Cloudflare detected and stopped it before it became a problem.”
Conrad Electronic
Top Rate Limiting use cases
Configure thresholds
Protect your website URLs and API endpoints from suspicious requests that exceed defined thresholds. Granular configuration options include status codes, specific URLs, request limits, and request methods.
Define responses
Visitors hitting defined request thresholds can trigger custom responses, including mitigating actions such as challenges or CAPTCHAS, response codes, timeouts, and blocking.
Get insights into traffic patterns
Scale and protect your resources with analytics including the amount of malicious traffic blocked by rule and the number of requests that reach your origin.
Helping organizations bolster their application security strategies