Skip to content

Create (or update) Cloudflare runbook to better address abuse and attack events

Incident: https://gitlab.com/gitlab-com/gl-infra/production/-/issues/2145

As an on-call SRE, I should have a runbook that helps describe how to identify an abuse or attack in Cloudflare, and describe the tools we can use in Cloudflare to mitigate such an event.

This should probably include sections on:

  1. Creating specific page rules to over-ride our security level for a URI
  2. Adding IP addresses to a block list
  3. Changing the zone-wide security level
  4. Explain how the global Im under attack toggle will affect the site