Cloudflare Docs

Cloudflare Docs

Overview
About
Custom rules
Create custom rules in the dashboard
Create custom rules via API
Configure a rule with the Skip action

API examples
Skip options

Manage custom rules in the dashboard
Firewall rules
Rate limiting rules
Determining the request rate
Create rate limiting rules in the dashboard
Create rate limiting rules via API
Rate limiting parameters
Common use cases
Managed Rulesets
Cloudflare Managed Ruleset
Cloudflare OWASP Core Ruleset
Cloudflare Exposed Credentials Check
Deploy Managed Rulesets for a zone
Deploy rulesets via API
Defining WAF exceptions

Define WAF exceptions in the dashboard
Define WAF exceptions via API

Log the payload of matched rules

Configure payload logging in the dashboard
View the payload content in the dashboard
Configure payload logging via API
Command-line operations

Generate a key pair
Decrypt the payload content
Automated exposed credentials check
How exposed credentials checks work
Configure exposed credentials checks via API
Test your exposed credentials checks configuration
Monitor exposed credentials events
Analytics
Free plan
Paid plans
Additional information
Alerts
Change log
Scheduled changes
2022-03-31 – Emergency
2022-03-29 – Emergency
2022-03-14
2022-03-07
2022-02-28
2022-02-21
2022-02-14
2022-01-24
2021-12-16 – Emergency
2021-12-14 – Emergency
2021-12-10 – Emergency
2021-11-01
2021-10-25
2021-10-19
2021-10-04
2021-09-06
2021-09-01 – Emergency
2021-08-31
2021-08-23
2021-08-16
2021-07-26
2021-07-19
2021-07-01 – Emergency
2021-06-21
2021-06-14
2021-06-07
2021-06-01
2021-04-21 – Emergency
2021-04-19
2021-03-22
2021-03-08
2021-03-06 – Emergency
2021-03-05 – Emergency
2021-03-01
2020-12-14
2020-12-02
2020-11-16
2020-11-05 – Emergency
2020-11-04 – Emergency
2020-10-19
2020-10-12
2020-10-05
2020-09-28
2020-09-21
2020-09-15
2020-09-07
2020-08-24
2020-09-01
2020-07-27
2020-08-03
2020-07-20
2020-07-07 – Emergency
2020-07-13
2020-06-22
2020-06-15
2020-06-08
2020-05-25
2020-05-11
2020-05-04
2020-04-27
2020-04-20
2020-04-06
2020-03-30
2020-03-23
2020-03-12
2020-03-09
2020-03-02 – Emergency
2020-02-17
2020-02-10
2020-01-27
2020-01-20
2020-01-16 – Emergency
2019-12-16
2019-11-25 – Emergency
2019-11-12
2019-11-07 – Emergency
2019-11-04
2019-10-27 – Emergency
2019-10-23 – Emergency
2019-10-21
2019-10-17 – Emergency
2019-10-14
2019-10-07
2019-09-30
2019-09-26 – Emergency
2019-09-16
Historical

Available skip options

The available skip options in custom rules are the following:

Skip the remaining custom rules (current ruleset)
- Dashboard option: All remaining custom rules.
- API action parameter: ruleset.
- Skips the remaining rules in the current ruleset.
Skip phases
- Dashboard options: All rate limiting rules and All managed rules.
- API action parameter: phases.
- Skips the execution of one or more phases. Based on the phases you can skip, this option effectively allows you to skip rate limiting rules and/or WAF Managed Rulesets . When skipping a phase, both the account and zone-level entry point rulesets of the phase will be skipped.
- The phases you can skip are the following:
  - http_request_firewall_managed
  - http_ratelimit
- Refer to Phases for more information.

Skip products

API action parameter: products.
Skips specific security products that are not based on the Ruleset Engine. The products you can skip are the following:

Product name in the dashboard	API value
Zone Lockdown	`zoneLockdown`
User Agent Blocking	`uaBlock`
Browser Integrity Check	`bic`
Hotlink Protection	`hot`
Security Level	`securityLevel`
Rate Limiting (previous version)	`rateLimit`
WAF managed rules (previous version)	`waf`

The API values are case sensitive.