Challenge suspicious clients with DDoS Protection rules

You can now configure DDoS Protection rules to challenge suspicious clients instead of blocking them outright. Challenging traffic helps legitimate users keep reaching your service during an attack while filtering out automated attack traffic. To use it, set a rule's action to client_challenge. The new action is also returned alongside default, block, log, and off when you list or retrieve rules.