---
title: Challenge suspicious clients with DDoS Protection rules
summary: null
url: >-
  https://www.fastly.com/documentation/reference/changes/2026/10/add-client-challenge-action-ddos-protection
---

You can now configure [DDoS Protection](https://www.fastly.com/documentation/reference/api/ddos-protection/) rules to challenge suspicious clients instead of blocking them outright. Challenging traffic helps legitimate users keep reaching your service during an attack while filtering out automated attack traffic. To use it, set a rule's action to `client_challenge`. The new action is also returned alongside `default`, `block`, `log`, and `off` when you list or retrieve rules.