Send real requests and see Cloudflare block the bad ones at the edge
Each button sends a request from your browser to api.aldo.cloud.
Green means the request reached the origin.
Red means Cloudflare blocked it before it reached the origin.
Use the Ray ID to find the request under Security → Events in the dashboard.
Legitimate traffic
Attacks and abuse
Request log
No requests yet.
What protects this API
- Endpoint Management: the 5 known operations are saved under Security → Web assets.
- Schema Validation: an OpenAPI schema validates path parameters, query strings and JSON bodies. Violations are blocked.
- Fallthrough rule: blocks requests to endpoints or methods that are not in the inventory.
- API key rule: a WAF custom rule rejects
/api/*calls without a validx-api-key. - Rate limiting: more than 5 login attempts in 10 seconds from one IP are blocked.
Demo only. Products, orders and users are fictional. Nothing is stored or charged.