导航|地址|刷新
Under a DDoS attack?

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/fundamentals/llms.txt
Use this file to discover all available pages before exploring further.



DocsDirectoryAPISDKsChangelog

Search

Log in






Cloudflare Fundamentals

/




Overview


Concepts


How Cloudflare DNS works

Traffic flow through Cloudflare

Accounts, zones, and profiles

Cloudflare IP addresses





Get started


Accounts


Create account


Account security


Add abuse contact

Allow Cloudflare access

Leaked Password Notifications

Manage active sessions

Review audit logs - v1

Audit Logs - v2


SCIM provisioning


Overview

Authentik

Microsoft Entra

Okta

Troubleshooting





Secure compromised account

Set up SSO ↗

Zone holds





Find account and zone IDs

Change Super Administrator






OrganizationsBeta


Overview

Organizations for Enterprise

Organizations for MSSP and Distributors

Policy sharing

Limitations and troubleshooting






Members and permissions


Members and permissions

Manage

Policies

Roles

Role scopes

User GroupsNew

Set up dashboard SSO






User profiles


Overview

Verify email address

Log in to Cloudflare

Profile settings

Account recovery

Delete your Cloudflare account

Email address and password

Multi-Factor Email Authentication

Two-factor authentication






Domains


Overview

Add multiple sites via automation

Change your domain version

Manage subdomains

Move a domain between Cloudflare accounts

Onboard a domain

Pause Cloudflare

Redirect one domain to another

Remove a domain

Star domains






Performance


Improve SEO

Maintenance mode

Minimize downtime

Optimize site speed ↗

Prepare for surges or spikes in web traffic ↗

Test speed






Security


Prevent DDoS attacks ↗

Protect your origin server

Recovering from a hacked site

Scan for PCI compliance

Secure your website ↗

Under a DDoS attack?






Cloudflare's API



Get started


Create API token

Get Global API key (legacy)

Get Origin CA keysDeprecated

Token formats

Account API tokens






How to


Make API calls

Create tokens via API

Control API Access

Restrict tokens

Roll tokens

API token template URLs






Reference


REST API ↗API

GraphQL API ↗

Wrangler API ↗

API token permissions

API deprecations

API token templates

Rate limits

SDKs





Troubleshooting






OAuth Applications on Cloudflare


Overview

Create your OAuth client

Integrate your OAuth client with Cloudflare

Authorizing an application






Reference



Migration guides


SCIM migration






Policies


Cloudflare Cookies

Compliance documentation

Content Security Policies (CSPs)

Delivering Videos with Cloudflare

Licenses

Project Cybersafe Schools






Abuse


Overview

Review abuse policies

Complaint types

Providing specific URLs

Customer abuse report obligations

View and submit reports

Blocked Content





SDK ecosystem support policy

Troubleshooting

/cdn-cgi/ endpoint

Account and domain management best practices

Cloudflare and Google Analytics

Cloudflare crawlers

Cloudflare HTTP headers

Cloudflare Ray ID

Cloudy AI agentBeta

Connection limits

Cryptographic Attestation of Personhood

Error responses

Glossary

Markdown for AgentsBeta

Network Layers

Network ports

Partners

Redirects

Scans and penetration testing policy

TCP connections

Under Attack mode






RSS Feeds


Available RSS Feeds

Consuming RSS Feeds






Agent resources


Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

Cloudflare Fundamentals llms.txt ↗

Cloudflare Fundamentals llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗













Home

/Cloudflare Fundamentals

/Security

/Under a DDoS attack?



Under a DDoS attack?


Last updated Apr 20, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewCommon signs of an attack




A distributed denial-of-service (DDoS) attack is where a large number of computers or devices, usually controlled by a single attacker, attempt to access a website or online service all at once. This flood of traffic can overwhelm the website's origin servers, causing the site to slow down or even crash.
sequenceDiagram; participant User; participant Website; participant Server; participant Botnet; User->>Website: Requests to access site Website->>Origin Server: Processes user requests Botnet->>Origin Server: Sends a flood of traffic Origin Server-->>Website: Slows down due to traffic overload Origin Server-->>User: Unable to respond to user requests


Common signs of an attack


Common signs that you are under DDoS attack include:

Your site is offline or slow to respond to requests.

Unexpected spikes appear in the graph of Requests Through Cloudflare or Bandwidth in your Cloudflare Analytics app.

Strange requests appear in your origin web server logs that do not match normal visitor behavior.


Note


If you are currently under DDoS attack, refer to Proactive DDoS defense best practices.




PreviousSecure your website ↗NextCreate API token


Was this helpful?

YesNo

Edit pageReport issue




On this page

Overview

Common signs of an attack


Edit pageReport issue














Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search


Company
AboutCareersInvestorsPressPress kitGlobal network




Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG


Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse




Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog


Developers
DocumentationLearning centerCommunity




Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform


Start BuildingLog In












© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices








Docs




------
导航页 打开网址