Can this skill automate Under Attack Mode?

Yes, it includes scripts for Python-based monitoring that can automatically toggle security levels based on real-time traffic anomalies detected via the Cloudflare API.

Is it possible to manage these settings via API?

Absolutely. This skill focuses heavily on using the Cloudflare API v4 for automated deployments, including DNS record updates and ruleset overrides.

What types of attacks does this skill help prevent?

It mitigates L3/4 volumetric attacks (such as SYN floods and UDP amplification), protocol attacks, and L7 application attacks like HTTP floods and Slowloris.

How does it protect the origin server from bypassing Cloudflare?

The skill provides workflows for configuring Authenticated Origin Pulls (mTLS) and scripts to automatically update origin firewall rules (iptables) to only allow Cloudflare's IP ranges.

Does this require a specific Cloudflare plan?

While basic features work on free plans, advanced WAF rules, managed rulesets, and granular DDoS overrides generally require a Pro, Business, or Enterprise plan.

Cloudflare DDoS Mitigation Implementation

Name: Cloudflare DDoS Mitigation Implementation
Author: micsapp

bymicsapp

0•

安全与测试

Configures multi-layer Cloudflare security controls to protect web infrastructure from volumetric, protocol, and application-layer DDoS attacks.

This skill empowers developers and security engineers to implement comprehensive DDoS protection using Cloudflare's global edge network. It provides automated workflows for configuring HTTP and Network-layer managed rulesets, advanced rate limiting, and Web Application Firewall (WAF) custom rules. Beyond edge security, it guides users through hardening origin servers using Authenticated Origin Pulls (mTLS) and IP allowlisting, ensuring that traffic only reaches the backend via Cloudflare's secure proxy. It is an essential tool for maintaining high availability and defending against sophisticated cyber threats.

主要功能

010 GitHub stars

02Automated configuration of L3/4 and L7 DDoS managed rulesets

03Python-based automation for dynamic Under Attack Mode activation

04Advanced rate limiting for API endpoints and login protection

05Custom WAF rule implementation for blocking high-risk traffic patterns

06Origin server hardening via mTLS and IP-based firewalling

使用场景

01Securing sensitive API endpoints against brute force and volumetric request surges

02Hardening origin server infrastructure to prevent direct-to-IP bypass attacks

03Protecting high-traffic web applications from Layer 7 HTTP floods and cache-busting attacks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills implementing-ddos-mitigation-with-cloudflare

For use in Claude.ai and ChatGPT

主要功能

010 GitHub stars

02Automated configuration of L3/4 and L7 DDoS managed rulesets

03Python-based automation for dynamic Under Attack Mode activation

04Advanced rate limiting for API endpoints and login protection

05Custom WAF rule implementation for blocking high-risk traffic patterns

06Origin server hardening via mTLS and IP-based firewalling

使用场景

01Securing sensitive API endpoints against brute force and volumetric request surges

02Hardening origin server infrastructure to prevent direct-to-IP bypass attacks

03Protecting high-traffic web applications from Layer 7 HTTP floods and cache-busting attacks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills implementing-ddos-mitigation-with-cloudflare

For use in Claude.ai and ChatGPT