support custom logic to block IPs exceeding defined thresholds
Most of the market WAF are already supported it.
Cloudflare WAF supports expressive rate limiting based on HTTP methods, traffic patterns, and custom error status codes, allowing you to block IPs that generate too many 401/403/500 errors. Rules ...