Hey, I launched my app recently and noticed something strange with Vercel’s firewall.
On launch day, the app received around 1,000+ requests, and ~350 were blocked by the firewall.
Problem: The next day, I got ~800 requests, with ~290 blocked. That’s over 30% of traffic being filtered out, which seems excessive — especially for a fresh app with no history of abuse.
What I expected: Maybe a few flagged requests here and there, but not hundreds. My traffic was organic, no ads, nothing spammy — just launch buzz. I expected the firewall to calibrate or be lenient for early traffic, but it seems overly aggressive.
Setup: • Hosted on Vercel • App built with no frameworks, just static html, css and js • Production environment • URL: https://www.nomouse.app • No custom firewall settings — using default DDoS protection
Questions:
- How can I relax the firewall rules to prevent false positives without risking abuse?
- Is this normal for new apps with sudden small-scale traffic bursts?
- Is this legit DDoS or is it the firewall freaking out?