Rate Limiting

Protect your APIs from abuse and your origin from being overwhelmed

Cloudflare Rate Limiting allows you to define granular thresholds for requests to your application and automatically block or log clients that exceed those limits.

Performance and Accuracy at Scale

Our rate limiting happens at Cloudflare's edge, across 335+ cities. We can block excessive traffic before it ever touches your origin server, saving you bandwidth and compute resources.

Rich, Flexible Rules Engine

Define limits based on a wide range of characteristics beyond just IP address, such as specific HTTP headers, query parameters, or even the result of a WAF check.