LSF is host L3/L4 protection, not network scrubbing and not a replacement for Cloudflare.
Defaults: SYN 10/s burst 20; 40 concurrent connections per IP on 80/443 and 10 on SSH; port-flood caps on 22/80/443; UDP/ICMP caps; Apply sysctl for syncookies and rp_filter.
If a legitimate crawler or remote backup is clipped, raise CONNLIMIT / PORTFLOOD / SYNFLOOD_RATE and Restart, or Allow the IP.
