{"id":667,"date":"2023-02-06T18:21:11","date_gmt":"2023-02-06T18:21:11","guid":{"rendered":"https:\/\/yohost.org\/library\/?p=667"},"modified":"2023-02-06T18:21:12","modified_gmt":"2023-02-06T18:21:12","slug":"combating-ddos-with-free-cloudflare-account","status":"publish","type":"post","link":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/","title":{"rendered":"Combating DDoS with free Cloudflare account"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">From time to time our customers face DDoS attacks and one of the mitigation tools we use is <a href=\"https:\/\/www.cloudflare.com\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Cloudflare<\/a>. We have already <a href=\"https:\/\/yohost.org\/library\/cloudflare-anti-ddos-configuration\/\" target=\"_blank\" rel=\"noreferrer noopener\">described basic anti-DDoS settings<\/a> in our previous article, but since then Cloudflare modified functionality of free accounts and it&#8217;s time to re-visit this topic.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-initial-configuration\">Initial configuration<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">There are few things to keep in mind before you start your fight against the DDoS attack. First, we need to prepare the ground.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">DNS Leak<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Make sure you DNS are not leaking your source server IP and all records are in <em>Proxy<\/em> mode. If your server IP is known to the attackers, they will be able to attack it directly by-passing Cloudflare. <\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><span class=\"placeholder-el\" data-svq-align=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-45x5.png\" alt=\"enable proxy cloudflare\" class=\"wp-image-668 lazy\" width=\"675\" height=\"80\" data-srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1024x123.png 1024w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-300x36.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-768x92.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-45x5.png 45w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image.png 1444w\" data-sizes=\"auto, (max-width: 675px) 100vw, 675px\" data-width=\"675\" data-height=\"80\" data-src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1024x123.png\" style=\"height: 0; width: 675px; padding-bottom: 11.85%;\"><span class=\"svq-img-loader\"><\/span><\/span><noscript><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1024x123.png\" alt=\"enable proxy cloudflare\" class=\"wp-image-668\" width=\"675\" height=\"80\" srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1024x123.png 1024w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-300x36.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-768x92.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-45x5.png 45w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image.png 1444w\" sizes=\"auto, (max-width: 675px) 100vw, 675px\" \/><\/noscript><figcaption class=\"wp-element-caption\">Proxied record marked green<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">I have to say in advance that if your emails are hosted on the same server, Cloudflare <a href=\"https:\/\/community.cloudflare.com\/t\/an-a-aaaa-cname-or-mx-record-is-pointed-to-your-origin-server-exposing-your-origin-ip-address\/67604\" target=\"_blank\" rel=\"noreferrer noopener\">reveals the IP<\/a> in order for emails to work. So either your email records should be turned off or <strong>ideally emails should be hosted separately<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If prior to attack, Cloudflare proxying was disabled, most likely the attacker already knows the IP and it&#8217;s better to ask your provider for an IP change before you enable the DDoS protection.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Combating the DDoS<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">There are several powerful tools available in free account which can stop almost any attack or at least discourage the attacker. Let&#8217;s revise them step by step. All the settings are located in the <em>Security<\/em> tab.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><span class=\"placeholder-el\" data-svq-align=\"\"><img loading=\"lazy\" decoding=\"async\" width=\"307\" height=\"266\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1-45x39.png\" alt=\"security settings cloudflare\" class=\"wp-image-669 lazy\" data-srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1.png 307w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1-300x260.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1-45x39.png 45w\" data-sizes=\"auto, (max-width: 307px) 100vw, 307px\" data-width=\"307\" data-height=\"266\" data-src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1.png\" style=\"height: 0; width: 307px; padding-bottom: 86.64%;\"><span class=\"svq-img-loader\"><\/span><\/span><noscript><img loading=\"lazy\" decoding=\"async\" width=\"307\" height=\"266\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1.png\" alt=\"security settings cloudflare\" class=\"wp-image-669\" srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1.png 307w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1-300x260.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-1-45x39.png 45w\" sizes=\"auto, (max-width: 307px) 100vw, 307px\" \/><\/noscript><figcaption class=\"wp-element-caption\">Security settings in Cloudflare<\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-1-enable-the-ddos-protection\">1. Enable the DDoS protection<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Navigate to &#8220;<em>Security<\/em>&#8221; > &#8220;<em>Settings<\/em>&#8221; and select &#8220;<strong>I&#8217;m under attack!<\/strong>&#8221; in the Security Level settings. See the image below.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><span class=\"placeholder-el\" data-svq-align=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2-45x20.png\" alt=\"enable ddos protection cloudflare\" class=\"wp-image-670 lazy\" width=\"640\" height=\"279\" data-srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2-1024x448.png 1024w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2-300x131.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2-768x336.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2-45x20.png 45w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2.png 1332w\" data-sizes=\"auto, (max-width: 640px) 100vw, 640px\" data-width=\"640\" data-height=\"279\" data-src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2-1024x448.png\" style=\"height: 0; width: 640px; padding-bottom: 43.59%;\"><span class=\"svq-img-loader\"><\/span><\/span><noscript><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2-1024x448.png\" alt=\"enable ddos protection cloudflare\" class=\"wp-image-670\" width=\"640\" height=\"279\" srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2-1024x448.png 1024w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2-300x131.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2-768x336.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2-45x20.png 45w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-2.png 1332w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/noscript><figcaption class=\"wp-element-caption\">Enable &#8220;I&#8217;m Under Attack&#8221;<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">In the <strong>Challenge Passage<\/strong> you can define how long the visitor can view the website without additional captcha requests after successful initial Captcha verification.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. DDoS Ruleset configuration<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Navigate to <strong>DDoS<\/strong> settings if you want to create a custom override of blocking and challenging rules.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><span class=\"placeholder-el\" data-svq-align=\"\"><img loading=\"lazy\" decoding=\"async\" width=\"316\" height=\"262\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-3-45x37.png\" alt class=\"wp-image-671 lazy\" data-srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-3.png 316w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-3-300x249.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-3-45x37.png 45w\" data-sizes=\"auto, (max-width: 316px) 100vw, 316px\" data-width=\"316\" data-height=\"262\" data-src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-3.png\" style=\"height: 0; width: 316px; padding-bottom: 82.91%;\"><span class=\"svq-img-loader\"><\/span><\/span><noscript><img loading=\"lazy\" decoding=\"async\" width=\"316\" height=\"262\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-3.png\" alt=\"\" class=\"wp-image-671\" srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-3.png 316w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-3-300x249.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-3-45x37.png 45w\" sizes=\"auto, (max-width: 316px) 100vw, 316px\" \/><\/noscript><figcaption class=\"wp-element-caption\">DDoS ruleset override<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Here Cloudflare offers a managed pre-configured list of rules to filter malicious traffic. It is possible to override the settings of these rules if you want to create more or less aggressive traffic filtering. <\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><span class=\"placeholder-el\" data-svq-align=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-4-45x47.png\" alt=\"ddos layer 7 ruleset\" class=\"wp-image-672 lazy\" width=\"510\" height=\"535\" data-srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-4.png 722w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-4-286x300.png 286w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-4-45x47.png 45w\" data-sizes=\"auto, (max-width: 510px) 100vw, 510px\" data-width=\"510\" data-height=\"535\" data-src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-4.png\" style=\"height: 0; width: 510px; padding-bottom: 104.90%;\"><span class=\"svq-img-loader\"><\/span><\/span><noscript><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-4.png\" alt=\"ddos layer 7 ruleset\" class=\"wp-image-672\" width=\"510\" height=\"535\" srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-4.png 722w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-4-286x300.png 286w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-4-45x47.png 45w\" sizes=\"auto, (max-width: 510px) 100vw, 510px\" \/><\/noscript><figcaption class=\"wp-element-caption\">Layer7 rules configuration<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Here you have several different options: &#8211; <strong>Ruleset action<\/strong>, choose what you want to do with requests matching the rule. Block, challenge, captcha or default. <strong>&#8211; Ruleset sensitivity<\/strong>, choose how aggressive will the rule be towards the suspicious requests. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Finally, you have <strong>Browse rules<\/strong> where you can review all traffic filtering rules and modify each and every of them. Most of them already pre-configured for the optimal performance.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Bot Fight Mode<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The next feature is quite powerful. Most of the DDOS attacks are run from the <a href=\"https:\/\/www.kaspersky.com\/resource-center\/threats\/botnet-attacks\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">botnets<\/a>, from millions of unaware owners of infected computers. Cloudflare provides DNS for millions of websites and hundreds of them face DDoS attacks daily, thus it has ability to identify the IPs used in the botnets. Navigate to <strong>Bots<\/strong> and enable <strong>Bot Fight Mode<\/strong>, like it&#8217;s shown on the image below.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><span class=\"placeholder-el\" data-svq-align=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5-45x12.png\" alt=\"bot fight mode enable cloudflare\" class=\"wp-image-674 lazy\" width=\"612\" height=\"168\" data-srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5-1024x282.png 1024w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5-300x83.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5-768x211.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5-45x12.png 45w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5.png 1362w\" data-sizes=\"auto, (max-width: 612px) 100vw, 612px\" data-width=\"612\" data-height=\"168\" data-src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5-1024x282.png\" style=\"height: 0; width: 612px; padding-bottom: 27.45%;\"><span class=\"svq-img-loader\"><\/span><\/span><noscript><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5-1024x282.png\" alt=\"bot fight mode enable cloudflare\" class=\"wp-image-674\" width=\"612\" height=\"168\" srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5-1024x282.png 1024w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5-300x83.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5-768x211.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5-45x12.png 45w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-5.png 1362w\" sizes=\"auto, (max-width: 612px) 100vw, 612px\" \/><\/noscript><figcaption class=\"wp-element-caption\">Enable Bot Fight Mode<\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">4. WAF (Web Application Firewall)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We finally got to the most comprehensive tool available in Free account &#8211; WAF or Web Application Firewall. WAF consists of 4 tools: Firewall rules, Rate limiting rules, Managed rules and Tools. Managed rules are not available in free account. But the most powerful tool against attacks has recently become available for free. It&#8217;s Rate Limiting. But let&#8217;s go one by one.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><span class=\"placeholder-el\" data-svq-align=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6-45x21.png\" alt=\"web application firewall\" class=\"wp-image-675 lazy\" width=\"585\" height=\"267\" data-srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6-1024x468.png 1024w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6-300x137.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6-768x351.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6-45x21.png 45w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6.png 1325w\" data-sizes=\"auto, (max-width: 585px) 100vw, 585px\" data-width=\"585\" data-height=\"267\" data-src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6-1024x468.png\" style=\"height: 0; width: 585px; padding-bottom: 45.64%;\"><span class=\"svq-img-loader\"><\/span><\/span><noscript><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6-1024x468.png\" alt=\"web application firewall\" class=\"wp-image-675\" width=\"585\" height=\"267\" srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6-1024x468.png 1024w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6-300x137.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6-768x351.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6-45x21.png 45w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-6.png 1325w\" sizes=\"auto, (max-width: 585px) 100vw, 585px\" \/><\/noscript><figcaption class=\"wp-element-caption\">Summary of WAF<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Firewall rules.<\/strong> In free account we can create up to 5 firewall rules. What are these rules? This can be rule blocking requests from a certain countries, continents, requests to specific URLs, requests based on specific user agent and many many more. The most common is blocking specific countries, known botnets and more advanced &#8211; user-agents.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><span class=\"placeholder-el\" data-svq-align=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7-45x68.png\" alt class=\"wp-image-676 lazy\" width=\"294\" height=\"445\" data-srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7.png 500w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7-198x300.png 198w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7-45x68.png 45w\" data-sizes=\"auto, (max-width: 294px) 100vw, 294px\" data-width=\"294\" data-height=\"445\" data-src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7.png\" style=\"height: 0; width: 294px; padding-bottom: 151.36%;\"><span class=\"svq-img-loader\"><\/span><\/span><noscript><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7.png\" alt=\"\" class=\"wp-image-676\" width=\"294\" height=\"445\" srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7.png 500w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7-198x300.png 198w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7-45x68.png 45w\" sizes=\"auto, (max-width: 294px) 100vw, 294px\" \/><\/noscript><figcaption class=\"wp-element-caption\">Firewall rules in WAF<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Rate limiting rules.<\/strong> We have 1 rule available for free but it&#8217;s more than enough in the most cases. Rate limiting allows us to filter multiple requests sent from the same IP. Usually attackers send dozens or even hundreds of requests from same IP and when we identify these IPs and block, the attack degrades a lot. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">See below for the example. We have set to block every IP with 5+ requests per 10 seconds. These are quite harsh settings. If the attack is not very strong, you can experiment with this value to avoid false positive blocks.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><span class=\"placeholder-el\" data-svq-align=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-8-45x38.png\" alt=\"rate limiting cloudflare\" class=\"wp-image-677 lazy\" width=\"530\" height=\"445\" data-srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-8.png 916w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-8-300x253.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-8-768x646.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-8-45x38.png 45w\" data-sizes=\"auto, (max-width: 530px) 100vw, 530px\" data-width=\"530\" data-height=\"445\" data-src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-8.png\" style=\"height: 0; width: 530px; padding-bottom: 83.96%;\"><span class=\"svq-img-loader\"><\/span><\/span><noscript><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-8.png\" alt=\"rate limiting cloudflare\" class=\"wp-image-677\" width=\"530\" height=\"445\" srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-8.png 916w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-8-300x253.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-8-768x646.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-8-45x38.png 45w\" sizes=\"auto, (max-width: 530px) 100vw, 530px\" \/><\/noscript><figcaption class=\"wp-element-caption\">Rate limiting configuration<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Tools.<\/strong> Here you can set IP access rules. The rules can be applied either to one website or to whole Cloudflare account. This is just a handy tool to quickly block offending IPs.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Events<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Events is a powerful tool for analyzing the traffic and detect similarities of the attacking requests. <\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><span class=\"placeholder-el\" data-svq-align=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-9-45x18.png\" alt class=\"wp-image-678 lazy\" width=\"575\" height=\"233\" data-srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-9.png 943w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-9-300x122.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-9-768x312.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-9-45x18.png 45w\" data-sizes=\"auto, (max-width: 575px) 100vw, 575px\" data-width=\"575\" data-height=\"233\" data-src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-9.png\" style=\"height: 0; width: 575px; padding-bottom: 40.52%;\"><span class=\"svq-img-loader\"><\/span><\/span><noscript><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-9.png\" alt=\"\" class=\"wp-image-678\" width=\"575\" height=\"233\" srcset=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-9.png 943w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-9-300x122.png 300w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-9-768x312.png 768w, https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-9-45x18.png 45w\" sizes=\"auto, (max-width: 575px) 100vw, 575px\" \/><\/noscript><figcaption class=\"wp-element-caption\">Example of request in Events<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Sometime attackers target certain URL of your website and you can spot and filter it. Sometimes attackers use same User agent and you can create a custom firewall rule for it. Or you can see majority of malicious requests from a few ASNs (network) and block them.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Combating an attack requires patience and experience. Many of the tools described here can be not very useful on its own, but if used together it adds up. DDoS mitigation is a methodical process, when you step by step identify the vector of attack and little by little close the door for the attackers. And we hope this beginners guides to combating the attack with free Cloudflare account will help you in this uneasy task. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>From time to time our customers face DDoS attacks and one of the mitigation tools we use is Cloudflare. We have already described basic anti-DDoS settings in our previous article, but since then Cloudflare modified functionality of free accounts and it&#8217;s time to re-visit this topic. Initial configuration There are few things to keep in [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":676,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"stax_block_gap":"","stax_show_title_section":"","stax_single_post_media_panel_height":"","stax_single_post_media_panel_text":"","stax_single_post_cateory_breadcrumb":"","stax_single_post_title_position":"","stax_single_post_title_align":"","stax_single_post_title_extra_align":"","stax_single_post_title_size":"","stax_single_post_image_width":"","stax_single_post_image_format":"","stax_single_post_audio_panel":"","stax_single_post_video_panel":"","stax_single_post_video_width":"","stax_single_post_gallery_panel":"","stax_single_post_gallery_width":"","stax_single_post_gallery_slides":"","stax_single_post_meta_author_avatar":"","stax_single_post_meta_author_name":"","stax_single_post_meta_post_date":"","stax_single_post_meta_reading_time":"","stax_single_post_shapes":"","footnotes":""},"categories":[92,5],"tags":[128,127,129],"class_list":["post-667","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-network","category-security","tag-cloudflare-firewall-settings","tag-cloudflare-free-ddos-protection","tag-combat-ddos-with-cloudflare"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.12 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Combating DDoS with free Cloudflare account<\/title>\n<meta name=\"description\" content=\"In this article we describe how to combat DDoS attacks using tools available in free Cloudflare account.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Combating DDoS with free Cloudflare account\" \/>\n<meta property=\"og:description\" content=\"In this article we describe how to combat DDoS attacks using tools available in free Cloudflare account.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/\" \/>\n<meta property=\"og:site_name\" content=\"Privacy Dedicated Library\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-06T18:21:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-02-06T18:21:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7.png\" \/>\n\t<meta property=\"og:image:width\" content=\"500\" \/>\n\t<meta property=\"og:image:height\" content=\"757\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Paul M\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@yohostorg\" \/>\n<meta name=\"twitter:site\" content=\"@yohostorg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Paul M\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/\"},\"author\":{\"name\":\"Paul M\",\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/#\\\/schema\\\/person\\\/69f04ef60b945341f65db69ad70c0faf\"},\"headline\":\"Combating DDoS with free Cloudflare account\",\"datePublished\":\"2023-02-06T18:21:11+00:00\",\"dateModified\":\"2023-02-06T18:21:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/\"},\"wordCount\":892,\"publisher\":{\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/yohost.org\\\/library\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/image-7.png\",\"keywords\":[\"cloudflare firewall settings\",\"cloudflare free ddos protection\",\"combat ddos with cloudflare\"],\"articleSection\":[\"Network\",\"Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/\",\"url\":\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/\",\"name\":\"Combating DDoS with free Cloudflare account\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/yohost.org\\\/library\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/image-7.png\",\"datePublished\":\"2023-02-06T18:21:11+00:00\",\"dateModified\":\"2023-02-06T18:21:12+00:00\",\"description\":\"In this article we describe how to combat DDoS attacks using tools available in free Cloudflare account.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/#primaryimage\",\"url\":\"https:\\\/\\\/yohost.org\\\/library\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/image-7.png\",\"contentUrl\":\"https:\\\/\\\/yohost.org\\\/library\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/image-7.png\",\"width\":500,\"height\":757},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/combating-ddos-with-free-cloudflare-account\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/yohost.org\\\/library\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Combating DDoS with free Cloudflare account\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/#website\",\"url\":\"https:\\\/\\\/yohost.org\\\/library\\\/\",\"name\":\"Privacy Dedicated Library\",\"description\":\"Everything about privacy protection, Bitcoin, encryption and technology\",\"publisher\":{\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/yohost.org\\\/library\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/#organization\",\"name\":\"Yohost.org\",\"url\":\"https:\\\/\\\/yohost.org\\\/library\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/yohost.org\\\/library\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/yhscree2.png\",\"contentUrl\":\"https:\\\/\\\/yohost.org\\\/library\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/yhscree2.png\",\"width\":431,\"height\":466,\"caption\":\"Yohost.org\"},\"image\":{\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/yohostorg\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/yohost.org\\\/library\\\/#\\\/schema\\\/person\\\/69f04ef60b945341f65db69ad70c0faf\",\"name\":\"Paul M\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6d68ca6c8d2150c879f23586b6734b585aca8528d5f9d6158a28685239857aee?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6d68ca6c8d2150c879f23586b6734b585aca8528d5f9d6158a28685239857aee?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6d68ca6c8d2150c879f23586b6734b585aca8528d5f9d6158a28685239857aee?s=96&d=mm&r=g\",\"caption\":\"Paul M\"},\"sameAs\":[\"https:\\\/\\\/yohost.org\\\/library\"],\"url\":\"https:\\\/\\\/yohost.org\\\/library\\\/author\\\/admin_31kufsla\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Combating DDoS with free Cloudflare account","description":"In this article we describe how to combat DDoS attacks using tools available in free Cloudflare account.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/","og_locale":"en_US","og_type":"article","og_title":"Combating DDoS with free Cloudflare account","og_description":"In this article we describe how to combat DDoS attacks using tools available in free Cloudflare account.","og_url":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/","og_site_name":"Privacy Dedicated Library","article_published_time":"2023-02-06T18:21:11+00:00","article_modified_time":"2023-02-06T18:21:12+00:00","og_image":[{"width":500,"height":757,"url":"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7.png","type":"image\/png"}],"author":"Paul M","twitter_card":"summary_large_image","twitter_creator":"@yohostorg","twitter_site":"@yohostorg","twitter_misc":{"Written by":"Paul M","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/#article","isPartOf":{"@id":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/"},"author":{"name":"Paul M","@id":"https:\/\/yohost.org\/library\/#\/schema\/person\/69f04ef60b945341f65db69ad70c0faf"},"headline":"Combating DDoS with free Cloudflare account","datePublished":"2023-02-06T18:21:11+00:00","dateModified":"2023-02-06T18:21:12+00:00","mainEntityOfPage":{"@id":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/"},"wordCount":892,"publisher":{"@id":"https:\/\/yohost.org\/library\/#organization"},"image":{"@id":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/#primaryimage"},"thumbnailUrl":"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7.png","keywords":["cloudflare firewall settings","cloudflare free ddos protection","combat ddos with cloudflare"],"articleSection":["Network","Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/","url":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/","name":"Combating DDoS with free Cloudflare account","isPartOf":{"@id":"https:\/\/yohost.org\/library\/#website"},"primaryImageOfPage":{"@id":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/#primaryimage"},"image":{"@id":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/#primaryimage"},"thumbnailUrl":"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7.png","datePublished":"2023-02-06T18:21:11+00:00","dateModified":"2023-02-06T18:21:12+00:00","description":"In this article we describe how to combat DDoS attacks using tools available in free Cloudflare account.","breadcrumb":{"@id":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/#primaryimage","url":"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7.png","contentUrl":"https:\/\/yohost.org\/library\/wp-content\/uploads\/2023\/02\/image-7.png","width":500,"height":757},{"@type":"BreadcrumbList","@id":"https:\/\/yohost.org\/library\/combating-ddos-with-free-cloudflare-account\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/yohost.org\/library\/"},{"@type":"ListItem","position":2,"name":"Combating DDoS with free Cloudflare account"}]},{"@type":"WebSite","@id":"https:\/\/yohost.org\/library\/#website","url":"https:\/\/yohost.org\/library\/","name":"Privacy Dedicated Library","description":"Everything about privacy protection, Bitcoin, encryption and technology","publisher":{"@id":"https:\/\/yohost.org\/library\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/yohost.org\/library\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/yohost.org\/library\/#organization","name":"Yohost.org","url":"https:\/\/yohost.org\/library\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/yohost.org\/library\/#\/schema\/logo\/image\/","url":"https:\/\/yohost.org\/library\/wp-content\/uploads\/2021\/12\/yhscree2.png","contentUrl":"https:\/\/yohost.org\/library\/wp-content\/uploads\/2021\/12\/yhscree2.png","width":431,"height":466,"caption":"Yohost.org"},"image":{"@id":"https:\/\/yohost.org\/library\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/yohostorg"]},{"@type":"Person","@id":"https:\/\/yohost.org\/library\/#\/schema\/person\/69f04ef60b945341f65db69ad70c0faf","name":"Paul M","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/6d68ca6c8d2150c879f23586b6734b585aca8528d5f9d6158a28685239857aee?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/6d68ca6c8d2150c879f23586b6734b585aca8528d5f9d6158a28685239857aee?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6d68ca6c8d2150c879f23586b6734b585aca8528d5f9d6158a28685239857aee?s=96&d=mm&r=g","caption":"Paul M"},"sameAs":["https:\/\/yohost.org\/library"],"url":"https:\/\/yohost.org\/library\/author\/admin_31kufsla\/"}]}},"_links":{"self":[{"href":"https:\/\/yohost.org\/library\/wp-json\/wp\/v2\/posts\/667","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/yohost.org\/library\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/yohost.org\/library\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/yohost.org\/library\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/yohost.org\/library\/wp-json\/wp\/v2\/comments?post=667"}],"version-history":[{"count":2,"href":"https:\/\/yohost.org\/library\/wp-json\/wp\/v2\/posts\/667\/revisions"}],"predecessor-version":[{"id":679,"href":"https:\/\/yohost.org\/library\/wp-json\/wp\/v2\/posts\/667\/revisions\/679"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/yohost.org\/library\/wp-json\/wp\/v2\/media\/676"}],"wp:attachment":[{"href":"https:\/\/yohost.org\/library\/wp-json\/wp\/v2\/media?parent=667"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/yohost.org\/library\/wp-json\/wp\/v2\/categories?post=667"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/yohost.org\/library\/wp-json\/wp\/v2\/tags?post=667"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}