You can create a Rate Limiting rule to timeout clients that exceed a certain request rate. The optimal threshold and period depends on your application. Here's an example Rate Limiting rule that will timeout clients for 1 minute if they send more than 20 requests per minute to the Image Resizing endpoint (

/cdn-cgi/image/

).