DDoS Attack Protection

I've launched startup and I am getting DDoS Attacks, so I hosted it on Vercel because as far as I know it has pretty good protection. I've enabled Attack Challenge Mode and it was able to stop the attack.

My question is: If I disable Attack Challenge Mode:

will default protection be enough to stop the attack?
will I have enough time after attack starts, to enable Attack Challenge Mode again?

Website is working on Websockets, instant connections are required so I can't have any "down" times, so Vercel app should always be live and accesible.

Screenshot 2025-01-08 124609

I'm glad Attack Challenge Mode worked as intended for you! Attackers use a lot of different strategies attempting to bypass existing protection strategies, so absolute protection is never a 100% guarantee. But I definitely recommend digging into all of your Vercel Firewall options.

Attack Challenge Mode works as an added layer that you can manually enable, but you'd want to make sure you also have DDoS attack alerts set up so you know about high traffic as quickly as possible.

If you can identify a pattern, then WAF custom rules would let most traffic through while blocking potentially malicious traffic in a more targeted way. Traffic denied, challenged, or rate‑limited by WAF rules is free on Vercel.

I hope that helps! Please let me know if you have any other questions 🙂