Skip to content

how to prevent DDoS attacks ?

Solved Vulnerability
34 2 13.5k 1
  • @phenomlab yes, we are planning to install Cloudflare again…

    We will go with “Pro” version and see how it works, I guess this should help not to have any session errors… Previously, we got many connection problems because of Cloudflare…

    wrote on last edited by
    #24

    @crazycells I wouldn’t be so sure. The pro version of Cloudflare is $20 per month but I don’t think that will resolve the connectivity issues.

    There also the harm that CF causes to SEO if you use their bot fight mode as I mention here

    https://sudonix.org/topic/503/cloudflare-bot-fight-mode-and-google-search

  • @crazycells I wouldn’t be so sure. The pro version of Cloudflare is $20 per month but I don’t think that will resolve the connectivity issues.

    There also the harm that CF causes to SEO if you use their bot fight mode as I mention here

    https://sudonix.org/topic/503/cloudflare-bot-fight-mode-and-google-search

    wrote on last edited by
    #25

    @phenomlab I have a good news. We set up CloudFlare Pro, and did not have connection problems yet.

    As you said, it costs $20/month if you subscribe annually, but we did monthly ($25) since we were not sure if this will work for us. So far everything looks OK. We will also check “Google Search” problem you mentioned as well after we secure our forum. Thanks a lot for this warning!

    Unfortunately, we had no choice about Cloudflare since we were getting more than 1 billion connection request from bots and forum was unusable for several hours two consecutive days…

    Screen Shot 2023-11-15 at 16.49.45.png

    Screen Shot 2023-11-18 at 13.22.28.png

    Screen Shot 2023-11-18 at 13.24.55.png

  • @phenomlab I have a good news. We set up CloudFlare Pro, and did not have connection problems yet.

    As you said, it costs $20/month if you subscribe annually, but we did monthly ($25) since we were not sure if this will work for us. So far everything looks OK. We will also check “Google Search” problem you mentioned as well after we secure our forum. Thanks a lot for this warning!

    Unfortunately, we had no choice about Cloudflare since we were getting more than 1 billion connection request from bots and forum was unusable for several hours two consecutive days…

    Screen Shot 2023-11-15 at 16.49.45.png

    Screen Shot 2023-11-18 at 13.22.28.png

    Screen Shot 2023-11-18 at 13.24.55.png

    wrote on last edited by
    #26

    @crazycells well, of course 1 billion+ requests happened after we installed CF, I do not know how many more we had before installing CF…

  • @phenomlab I have a good news. We set up CloudFlare Pro, and did not have connection problems yet.

    As you said, it costs $20/month if you subscribe annually, but we did monthly ($25) since we were not sure if this will work for us. So far everything looks OK. We will also check “Google Search” problem you mentioned as well after we secure our forum. Thanks a lot for this warning!

    Unfortunately, we had no choice about Cloudflare since we were getting more than 1 billion connection request from bots and forum was unusable for several hours two consecutive days…

    Screen Shot 2023-11-15 at 16.49.45.png

    Screen Shot 2023-11-18 at 13.22.28.png

    Screen Shot 2023-11-18 at 13.24.55.png

    wrote on last edited by
    #27

    @crazycells Good news in the short term, but interested to see if this does impact the SEO of your forum. Do you have Bot Fight Mode enabled in CF?

  • @crazycells Good news in the short term, but interested to see if this does impact the SEO of your forum. Do you have Bot Fight Mode enabled in CF?

    wrote on last edited by crazycells
    #28

    @phenomlab I actually do not know yet, because I have not found these settings on the CF yet…

    Can you please show me how I reach those?

    Screen Shot 2023-11-21 at 16.27.14.png

    and this is the bot page:

    Screen Shot 2023-11-21 at 16.29.47.png

  • @phenomlab I actually do not know yet, because I have not found these settings on the CF yet…

    Can you please show me how I reach those?

    Screen Shot 2023-11-21 at 16.27.14.png

    and this is the bot page:

    Screen Shot 2023-11-21 at 16.29.47.png

    wrote on last edited by
    #29

    @crazycells see the link located at the top right of that screenshot 😂

  • @crazycells see the link located at the top right of that screenshot 😂

    wrote on last edited by
    #30

    @phenomlab lol thanks…

    Mouxy Cotorep GIF

    is it “Verified bots”?

    Screen Shot 2023-11-21 at 16.54.43.png

  • @phenomlab lol thanks…

    Mouxy Cotorep GIF

    is it “Verified bots”?

    Screen Shot 2023-11-21 at 16.54.43.png

    wrote on last edited by
    #31

    @crazycells yes, exactly. You want to allow crawlers such as Google bot etc.

  • @crazycells yes, exactly. You want to allow crawlers such as Google bot etc.

    wrote on last edited by
    #32

    @phenomlab thanks. so, it looks like we are good for now…

    is there any other way to verify independently that indexing works ok?

  • @phenomlab thanks. so, it looks like we are good for now…

    is there any other way to verify independently that indexing works ok?

    wrote on last edited by
    #33

    @crazycells the only accurate way is to use the URL Inspection Tool

    https://support.google.com/webmasters/answer/9012289?hl=en

  • @crazycells the only accurate way is to use the URL Inspection Tool

    https://support.google.com/webmasters/answer/9012289?hl=en

    wrote on last edited by
    #34

    @phenomlab thank you very much, this was helpful. Everything looks ok 🙂

  • crazycells crazycells has marked this topic as solved on

Did this solution help you?
Did you find the suggested solution useful? Support 💗 Sudonix with a coffee ☕
If your organisation needs deeper expertise around infrastructure, security, or technology leadership, learn more about Phenomlab Ltd. Many of the deeper technical guides behind Sudonix are published there.

Related Topics
  • Nodebb icon on google page

    Solved Customisation nodebb
    9
    1
    4 Votes
    9 Posts
    4k Views
    phenomlab
    @Panda It’s been raised multiple times, but only for the open source version, and not hosted.
  • Bug in Nodebb route when clicking title

    Moved Configure nodebb
    3
    2 Votes
    3 Posts
    1k Views
    Panda
    Ah silly me, thanks for finding that!
  • Nodebb design

    Solved General nodebb
    2
    1 Votes
    2 Posts
    1k Views
    phenomlab
    @Panda said in Nodebb design: One negative is not being so good for SEO as more Server side rendered forums, if web crawlers dont run the JS to read the forum. From recollection, Google and Bing have the capability to read and process JS, although it’s not in the same manner as a physical person will consume content on a page. It will be seen as plain text, but will be indexed. However, it’s important to note that Yandex and Baidu will not render JS, although seeing as Google has a 90% share of the content available on the web in terms of indexing, this isn’t something you’ll likely lose sleep over. @Panda said in Nodebb design: The “write api” is preferred for server-to-server interactions. This is mostly based around overall security - you won’t typically want a client machine changing database elements or altering data. This is why you have “client-side” which could be DOM manipulation etc, and “server-side” which performs more complex operations as it can communicate directly with the database whereas the client cannot (and if it can, then you have a serious security flaw). Reading from the API is perfectly acceptable on the client-side, but not being able to write. A paradigm here would be something like SNMP. This protocol exists as a UDP (UDP is very efficient, as it is “fire and forget” and does not wait for a response like TCP does) based service which reads performance data from a remote source, thus enabling an application to parse that data for use in a monitoring application. In all cases, SNMP access should be “RO” (Read Only) and not RW (Read Write). It is completely feasible to assume complete control over a firewall for example by having RW access to SNMP and then exposing it to the entire internet with a weak passphrase. You wouldn’t do it (at least, I hope you wouldn’t) and the same ethic applies to server-side rendering and the execution of commands.
  • Header Menu After Upgrading V3.1.1

    Solved Customisation header nodebb
    2
    1
    2 Votes
    2 Posts
    1k Views
    phenomlab
    @cagatay this relates to a change the css classes used for the brand header meaning it will now float to the left instead of right. If you’d like to retain the original behavior, you can add this css class [data-widget-area="brand-header"] { justify-content: end; display: flex; } Further information here https://community.nodebb.org/topic/17090/manual-build-a-custom-header-in-harmony/19?_=1684069325296
  • NodeBB: The global Search option

    Solved Configure search nodebb
    5
    0 Votes
    5 Posts
    1k Views
    phenomlab
    @mventures Yes, exactly. The other icon will restart NodeBB whilst the first icon I referenced will rebuild (recompile) it. The huge strength of NodeBB over Flarum (for example) is that the code is precompiled, and called once at boot. PHP’s code has to repeatedly reload code from source making it much slower.
  • Upgrade Problem from 2.8.3 to 2.8.4

    Solved Configure nodebb
    35
    1
    8 Votes
    35 Posts
    12k Views
    phenomlab
    @cagatay No, you can ignore that.
  • 0 Votes
    5 Posts
    2k Views
    phenomlab
    @qwinter this particular site uses the code I wrote if you want to see it in action. It’s a information and intelligence gatherer I designed for collecting various information security articles from around the globe and consolidating them in one place. Essentially, each “post” is in fact generated by the script, and the NodeBB API. https://hostrisk.com/
  • background color of the footer area

    Solved Customisation nodebb
    7
    1
    7 Votes
    7 Posts
    4k Views
    crazycells
    @phenomlab thank you very much