Help needed with LUA script! Convert Cloudflare Rule

Lua Scripts
1

Hi,

was testing few DDOS Booters online on our website, found a way to block attacks via custom rule via Cloudflare, but need to convert it to HAPROXY rule so I worked on a LUA script, but wasn’t able to reach any result near.

I don’t know how actually Cloudflare calculates headers but was testing few rules out on CF for hours and it was successful to block attacks.

it is with setting

any(len(http.request.headers.values[*])[*] gt 130)

-- Function to check the number of headers
function check_headers(txn)
    local headers = txn.http:req_get_headers()
    local header_count = 0

    for _ in pairs(headers) do
        header_count = header_count + 1
    end

    if header_count > 130 then
        txn:set_var('txn.too_many_headers', true)
    end


end

-- Register the function to be called for each HTTP request
core.register_action('check_headers', {'http-req'}, check_headers)

here is the thread that I took ideas from but couldn’t achieve any success! Tried AI help, rules out and same result.

2

I’d try it this way.

In your check_headers.lua script change this:

    if header_count > 130 then
        return true
   else 
       return false
    end

and then in your haproxy.cfg try this:

	http-request deny if { lua.check_headers }

I use this in haproxy.cfg to stop repeat traffic.

	acl too_many_requests sc_http_req_rate(0) gt 20
	http-request deny deny_status 429 if too_many_requests