LiteSpeed configuration
Budget: €8 – €30 EUR
Hello,
I would like to have a good DDoS Protection for my website, and I would like to configure OpenLiteSpeed DDoS Protection (https://docs.litespeedtech.com/lsws/cp/cpanel/antiddos/) and we are using also Cloudflare.
In particularly I would like to set ReCAPTCHA but I have some issues with it, as well as with "Per Client Throttling" settings.
LiteSpeed Settings configuration:
Use Client IP in Header is in Trusted IP Only
Allowed List contains Cloudflare IPs
LS reCAPTCHA Max Tries is on 10, but why when someone visit the page for the first time my website and reload the page, it will have 403 Forbidden error even if it is the first try with Captcha?
Also I can't use Per Client Throttling it should be rate limit but it doesn't work, maybe because Cloudflare IPs are whitelisted?
While we get the real visitors IPs it looks like ReCAPTCHA is blocking Cloudflare IPs, because everyone will be blocked even if they performed the Captcha or even if you reload the page for the first time without performing the captcha, it will redirect you instantly to 403 error page instead of letting you try until 10 times.
I would like to have a good DDoS Protection for my website, and I would like to configure OpenLiteSpeed DDoS Protection (https://docs.litespeedtech.com/lsws/cp/cpanel/antiddos/) and we are using also Cloudflare.
In particularly I would like to set ReCAPTCHA but I have some issues with it, as well as with "Per Client Throttling" settings.
LiteSpeed Settings configuration:
Use Client IP in Header is in Trusted IP Only
Allowed List contains Cloudflare IPs
LS reCAPTCHA Max Tries is on 10, but why when someone visit the page for the first time my website and reload the page, it will have 403 Forbidden error even if it is the first try with Captcha?
Also I can't use Per Client Throttling it should be rate limit but it doesn't work, maybe because Cloudflare IPs are whitelisted?
While we get the real visitors IPs it looks like ReCAPTCHA is blocking Cloudflare IPs, because everyone will be blocked even if they performed the Captcha or even if you reload the page for the first time without performing the captcha, it will redirect you instantly to 403 error page instead of letting you try until 10 times.