Cloudflare API | Rulesets › Update An Account Or Zone Ruleset

curl https://api.cloudflare.com/client/v4/$ACCOUNT_ID/$ZONE_ID/rulesets/$RULESET_ID \
    -X PUT \
    -H 'Content-Type: application/json' \
    -H "X-Auth-Email: $CLOUDFLARE_EMAIL" \
    -H "X-Auth-Key: $CLOUDFLARE_API_KEY" \
    -d '{
      "rules": [
        {
          "last_updated": "2000-01-01T00:00:00.000000Z",
          "version": "1"
        }
      ],
      "description": "My ruleset to execute managed rulesets",
      "kind": "managed",
      "name": "My ruleset",
      "phase": "ddos_l4"
    }'

200Example

{
  "errors": [
    {
      "message": "something bad happened",
      "code": 10000,
      "source": {
        "pointer": "/rules/0/action"
      }
    }
  ],
  "messages": [
    {
      "message": "something bad happened",
      "code": 10000,
      "source": {
        "pointer": "/rules/0/action"
      }
    }
  ],
  "result": {
    "id": "2f2feab2026849078ba485f918791bdc",
    "kind": "managed",
    "last_updated": "2000-01-01T00:00:00.000000Z",
    "name": "My ruleset",
    "phase": "ddos_l4",
    "rules": [
      {
        "last_updated": "2000-01-01T00:00:00.000000Z",
        "version": "1",
        "id": "3a03d665bac047339bb530ecb439a90d",
        "action": "block",
        "action_parameters": {
          "response": {
            "content": "{\n  \"success\": false,\n  \"error\": \"you have been blocked\"\n}",
            "content_type": "application/json",
            "status_code": 400
          }
        },
        "categories": [
          "directory-traversal",
          "header"
        ],
        "description": "Block when the IP address is not 1.1.1.1",
        "enabled": true,
        "exposed_credential_check": {
          "password_expression": "url_decode(http.request.body.form[\\\"password\\\"][0])",
          "username_expression": "url_decode(http.request.body.form[\\\"username\\\"][0])"
        },
        "expression": "ip.src ne 1.1.1.1",
        "logging": {
          "enabled": true
        },
        "ratelimit": {
          "characteristics": [
            "ip.src"
          ],
          "period": 10,
          "counting_expression": "http.request.body.raw eq \"abcd\"",
          "mitigation_timeout": 600,
          "requests_per_period": 1000,
          "requests_to_origin": true,
          "score_per_period": 400,
          "score_response_header_name": "my-score"
        },
        "ref": "my_ref"
      }
    ],
    "version": "1",
    "description": "My ruleset to execute managed rulesets"
  },
  "success": true
}

Domain types

Kind = "managed" | "custom" | "root" | 1 more...

Phase = "ddos_l4" | "ddos_l7" | "http_config_settings" | 20 more...

Ruleset = { id, last_updated, version, 2 more... }

Rulesets

Phases

rulesets.phases

Methods

Get An Account Or Zone Entry Point Ruleset -> Envelope<{ id, kind, last_updated, 5 more... }>

get/{account_or_zone}/{account_or_zone_id}/rulesets/phases/{ruleset_phase}/entrypoint

Fetches the latest version of the account or zone entry point ruleset for a given phase.

Update An Account Or Zone Entry Point Ruleset -> Envelope<{ id, kind, last_updated, 5 more... }>

put/{account_or_zone}/{account_or_zone_id}/rulesets/phases/{ruleset_phase}/entrypoint

Updates an account or zone entry point ruleset, creating a new version.

Rulesets Phases

Versions

rulesets.phases.versions

Methods

Get An Account Or Zone Entry Point Ruleset Version -> Envelope<{ id, kind, last_updated, 5 more... }>

get/{account_or_zone}/{account_or_zone_id}/rulesets/phases/{ruleset_phase}/entrypoint/versions/{ruleset_version}

Fetches a specific version of an account or zone entry point ruleset.

List An Account Or Zone Entry Point Ruleset S Versions -> SinglePage<{ id, kind, last_updated, 4 more... }>

get/{account_or_zone}/{account_or_zone_id}/rulesets/phases/{ruleset_phase}/entrypoint/versions

Fetches the versions of an account or zone entry point ruleset.

Rulesets

Rules

rulesets.rules

Methods

Create An Account Or Zone Ruleset Rule -> Envelope<{ id, kind, last_updated, 5 more... }>

post/{account_or_zone}/{account_or_zone_id}/rulesets/{ruleset_id}/rules

Adds a new rule to an account or zone ruleset. The rule will be added to the end of the existing list of rules in the ruleset by default.

Delete An Account Or Zone Ruleset Rule -> Envelope<{ id, kind, last_updated, 5 more... }>

delete/{account_or_zone}/{account_or_zone_id}/rulesets/{ruleset_id}/rules/{rule_id}

Deletes an existing rule from an account or zone ruleset.

Update An Account Or Zone Ruleset Rule -> Envelope<{ id, kind, last_updated, 5 more... }>

patch/{account_or_zone}/{account_or_zone_id}/rulesets/{ruleset_id}/rules/{rule_id}

Updates an existing rule in an account or zone ruleset.

Domain types

BlockRule = { last_updated, version, id, 10 more... }

CompressResponseRule = { last_updated, version, id, 10 more... }

DDoSDynamicRule = { last_updated, version, id, 10 more... }

ExecuteRule = { last_updated, version, id, 10 more... }

ForceConnectionCloseRule = { last_updated, version, id, 10 more... }

LogCustomFieldRule = { last_updated, version, id, 10 more... }

LogRule = { last_updated, version, id, 10 more... }

Logging = { enabled }

ManagedChallengeRule = { last_updated, version, id, 10 more... }

RedirectRule = { last_updated, version, id, 10 more... }

RewriteRule = { last_updated, version, id, 10 more... }

RewriteURIPart = { value } | { expression }

RouteRule = { last_updated, version, id, 10 more... }

RulesetRule = { last_updated, version, id, 10 more... }

ScoreRule = { last_updated, version, id, 10 more... }

ServeErrorRule = { last_updated, version, id, 10 more... }

SetCacheSettingsRule = { last_updated, version, id, 10 more... }

SetConfigRule = { last_updated, version, id, 10 more... }

SkipRule = { last_updated, version, id, 10 more... }

Rulesets

Versions

rulesets.versions

Methods

Delete An Account Or Zone Ruleset Version ->

delete/{account_or_zone}/{account_or_zone_id}/rulesets/{ruleset_id}/versions/{ruleset_version}

Deletes an existing version of an account or zone ruleset.

Get An Account Or Zone Ruleset Version -> Envelope<{ id, kind, last_updated, 5 more... }>

get/{account_or_zone}/{account_or_zone_id}/rulesets/{ruleset_id}/versions/{ruleset_version}

Fetches a specific version of an account or zone ruleset.

List An Account Or Zone Ruleset S Versions -> SinglePage<{ id, kind, last_updated, 4 more... }>

get/{account_or_zone}/{account_or_zone_id}/rulesets/{ruleset_id}/versions

Fetches the versions of an account or zone ruleset.