WAF docs: Rate limiting rules are not designed to ...
# general-discussions
i
WAF docs: > Rate limiting rules are not designed to allow a precise number of requests to reach the origin server. In some situations, there may be a delay (up to a few seconds) between detecting a request and updating internal counters. Due to this delay, excess requests could still reach the origin server before Cloudflare enforces a mitigation action (such as blocking or challenging) in our global network. How bad is this delay generally ? Want to use it to enforce 1 request per 10s, is it realistic for denial of wallet attacks against workers.