/ Register

Learn about Centmin Mod LEMP Stack today
Register Now

Cloudflare Cloudflare Announced Super Bot Fight Mode

Discussion in 'Domains, DNS, Email & SSL Certificates' started by eva2000, Mar 27, 2021.

Tags:
Previous Thread Next Thread
Loading...
  1. Mar 27, 2021 #1
    eva2000

    eva2000 Administrator Staff Member

    47,292
    10,700
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,625
    Local Time:
    10:23 AM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    Cloudflare has announced Super Bot Fight Mode for Pro and Business plan users as part of Cloudflare Security Week 2021. Cloudflare Enterprise plans have more advanced Bot Management feature though. Details at Introducing Super Bot Fight Mode

    Difference is Enterprise Bot Management deeply integrates with Cloudflare Firewall rules so you can do custom rules targeting specific bot scores/patterns. While Super Bot Fight Mode doesn't have that deeper integration in Cloudflare Firewall rules and just has settings to group automated, likely automated and verified bot actions.

    Cloudflare Super Bot Fight Mode

    super-bot-fight-mode-configuration-01.png

    Cloudflare Enterprise Bot Management Firewall Rule example

    cf-enterprise-bot-management-firewall-rule-example-01.png
     
    Last edited: Mar 27, 2021
  2. Mar 29, 2021 #2
    eva2000

    eva2000 Administrator Staff Member

    47,292
    10,700
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,625
    Local Time:
    10:23 AM
    Nginx 1.19.x
    MariaDB 5.5/10.x
  3. Apr 14, 2021 #3
    rdan

    rdan Well-Known Member

    5,077
    1,255
    113
    May 25, 2014
    Ratings:
    +1,908
    Local Time:
    8:23 AM
    Mainline
    10.2
    Just a review about this feature, Definitely automated still flagged down my legit visitors.
    So I set it to allow for now.
     
  4. Apr 14, 2021 #4
    eva2000

    eva2000 Administrator Staff Member

    47,292
    10,700
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,625
    Local Time:
    10:23 AM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    Yeah unfortunately, Super Bot Fight Mode isn't suited for use at all, there's no way to whitelist your good bots so it blocks good and bad bots unlike Cloudflare Enterprise Bot Management which you can use CF Firewall rules to whitelist good bots etc.

    @BamaStangGuy has been quite vocal about the flaws in current Super Bot Fight Mode too.

    FYI, Super Bot Fight Mode will block some Hetrixtool uptime bots
     
  5. Apr 15, 2021 #5
    BamaStangGuy

    BamaStangGuy Premium Member Premium Member

    657
    189
    43
    May 25, 2014
    Ratings:
    +265
    Local Time:
    7:23 PM
    I just know that people less tech-savvy than me will see that feature and understand it to be a safe thing to enable. Going to hurt a lot of sites. If they are not willing to fix it for Pro and Business users then they should at the very least add a disclaimer stating its harmful to enable it.
     
  6. Apr 15, 2021 #6
    eva2000

    eva2000 Administrator Staff Member

    47,292
    10,700
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,625
    Local Time:
    10:23 AM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    +1 totally agree. Honestly, don't know what they were thinking releasing Super Bot Fight Mode in this limited state. I was hoping it to be more inline with Cloudflare's Enterprise Bot Management as that feature is bloody awesome in handling automated bots and malicious bots.
     
    Last edited: Apr 15, 2021
Previous Thread Next Thread
Loading...

.