NoAttack is a tool designed to monitor incoming network traffic and automatically enable or disable Cloudflare's "Under Attack" mode based on defined thresholds. It integrates various components, including Redis, Cloudflare, and a Discord Webhook for notification purposes.

• Monitors incoming network traffic in real time.
• Automatically enables "Under Attack" mode in Cloudflare when traffic exceeds a predefined threshold.
• Sends alerts via a Discord webhook during critical events.
• Includes Redis for caching operations.

Before starting, make sure the following are installed:

• Docker and Docker Compose
• Python 3.12 or later (if not using Docker Compose)

1. Clone the repository:

   git clone https://github.com/SytxLabs/NoAttack.git
   cd NoAttack

2. Setup configuration: Edit the config.yaml file to include your Cloudflare credentials and other settings:

   CLOUDFLARE:
     API_KEY: "<Your Cloudflare API Key>"
     EMAIL: "<Your Email Address>"
     ZONE_IDS: [
       "<Zone ID 1>",
       "<Zone ID 2>"
     ]
   REDIS:
     HOST: "<Redis Host>"
     PASSWORD: "<Redis Password>"
     PORT: 6379
   SETTINGS:
     CHECK_INTERVAL: 60  # Monitoring interval in seconds
     LOGGING: true  # Enable logging
     MAX_INCOMING_TRAFFIC_MB: 50  # Maximum threshold for incoming traffic
     WEBHOOK: "<Discord Webhook URL>"

3. Build and run using Docker Compose:

   docker-compose up --build

4. Install dependencies manually (if not using Docker Compose):

   • Install dependencies via pip:

     pip install -r requirements.txt

   • Run the script:

     python main.py

NoAttack monitors incoming network traffic and takes automated actions based on the configuration.

1. Monitor Traffic:

   • Logs real-time data about incoming and outgoing traffic in MB/s.

2. Activate Cloudflare "Under Attack" Mode:

   • If traffic exceeds the MAX_INCOMING_TRAFFIC_MB limit, Cloudflare's "Under Attack" mode is activated for all specified zones.

3. Deactivate Cloudflare "Under Attack" Mode:

   • When traffic drops below the threshold, the "Under Attack" mode is deactivated.

4. Notifications:

   • Sends real-time updates regarding the activation or deactivation of the "Under Attack" mode to the specified Discord webhook.

• Simply run the application using:

  docker-compose up

  or

  python main.py

• If logging is enabled (SETTINGS.LOGGING: true), the application will send notifications to the Discord webhook.

• Redis Integration: Used for caching to optimize performance.
• Discord Webhook: Sends notifications about changes to ensure visibility for administrators.

For development purposes:

• Add changes to the application code and rebuild the Docker container:

  docker-compose up --build

• After modifying the code and or config.yaml, run the Python application:

  python main.py

1. Cloudflare API Errors:
   • Ensure your API key and Zone IDs are correct in config.yaml.
   • Verify your internet connection.

The idea for this project was inspired by guidedhacking.