CF-Changes WAF - Response custom rules

Cloudflare Reporting - Product Changelog

ENF News Bot

Automated News Bot
Joined
Apr 15, 2022
Messages
4,195
The response firewall can block responses before they reach visitors. Cloudflare turns on default protections for everyone, on every plan.

Every plan includes three response custom rules per zone. These rules run in the http_response_firewall_custom phase.

Rules support the block, log, and execute actions. You can include at most one execute rule within the three-rule allowance.

Response custom rules can combine request fields with response fields. For requests to /api/ paths, this expression matches responses with status code 500:


starts_with(http.request.uri.path, "/api/") and http.response.code eq 500

For background, refer to the full transaction detection announcement ↗︎.

For supported actions, fields, and limits, refer to Response firewall.

Continue reading...
 
Back
Top