title: NGINX rate limiting doesn't work when using Cloudflare. I can bring down my site with a simple `ab` command
body: <p>I implemented a pretty simple but super effective rate limiting based on this blog post: <a href="https://www.nginx.com/blog/rate-limiting-nginx/" rel="nofollow noreferrer">https://www.nginx.com/blog/rate-limiting-nginx/</a></p>
  
  <p>Basically:</p>
  
  <pre><code>limit_req_zone $binary_remote_addr zone=ip:10m rate=10r/s;
  
  limit_req zone=ip burst=20 nodelay;
  </code></pre>
  
  <p>It works great. However, recently I tried Cloudflare, and this doesn't protect me anymore. I can bring down the site myself with a simple command of:</p>
  
  <pre><code>ab -k -c 1000 -n 10000 site.com/
  </code></pre>
  
  <p>What's happening?</p>