And that even tho I got working Turnstile infront of it
#Botnet Spamming my Site
sly arrow
I now noticed that clientRefererHost is always different. Some sites are given there like twitch, amazon etc
👀 tell me how
sly arrow
@willow plaza ?
jagged isle
The turnstile code is inside the Worker, so the Worker will always invoke even if the bot can't get past the turnstile. Instead of turnstile, use a Custom WAF Rule to issue the challenge which will trigger before the Worker.
sly arrow
The turnstile code is inside the Worker, so the Worker will always invoke even i...
You mean Custom Security Rule? Cause I dont want to buy WAF
jagged isle
Yes
jagged isle
There is a guide here... https://developers.cloudflare.com/waf/custom-rules/create-dashboard/