---
schema_version: "1"
id: 9b64763bfddd24864652c374b3d66d387c6ad1b8d3416f89ff6e99e70c4726a4
title: Protect Against Brute Force Attacks
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/rn_b2c_rn_protect_against_brute_force_attacks.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.rn_b2c_rn_protect_against_brute_force_attacks.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 27d964d0463f54555171495e9c2fe444ba95f93a8668336d80995cd15bd458c1
description: Starting September 12, 2023, B2C Commerce will introduce custom rate limits rules for the eCDN CDN-API. Rate limiting rules allow you to specify rate limits for requests that match a particular expression and then perform an action when those rate limits are reached.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Protect Against Brute Force Attacks

Starting September 12, 2023, B2C Commerce will introduce custom rate limits rules for the eCDN CDN-API. Rate limiting rules allow you to specify rate limits for requests that match a particular expression and then perform an action when those rate limits are reached.

Why: This change offers the capability to impose a rate limit on specific path signatures. You can use rate limit rules to improve storefront availability by targeting specific traffic patterns and combating threats, such as bots. Rate limits are particularly useful to protect your site from brute force attacks that impact site availability.

How: You can configure up to 3 rate limit rules with the CDN-API. The rules can log, block, or challenge when traffic with supported fields exceeds the limits you set up.

#### See Also

- [eCDN Rate Limiting Rules](https://developer.salesforce.com/docs/commerce/commerce-api/guide/cdn-rate-limiting-rules.html)
- [`CreateRateLimitingRule`](https://developer.salesforce.com/docs/commerce/commerce-api/references/cdn-api-process-apis?meta=createRateLimitingRule)