I had the same issue with one of my sites. I activated CF owasp ruleset and all hell broke lose (it took a while to backtrack, aka down the rabbit hole I went). I deactivated it and the problems remained. It took several hours before things were back to normal. All in all - CF is too big now, they want to have ALL the features, but the only feature I want is DDoS protection…