Overview

Cloudflare Firewall Rules allows you to create rules that inspect incoming traffic and block, challenge, log, or allow specific requests.

Deprecation notice

Firewall rules have been deprecated. Cloudflare has moved existing firewall rules to WAF custom rules. For more information on this change, refer to the migration guide.

Main features

• Rule-based protection: Use pre-defined rulesets provided by Cloudflare, or define your own firewall rules. Create rules in the Cloudflare dashboard or via API.
• Complex custom rules: Each rule’s expression can reference multiple fields from all the available HTTP request parameters and fields, allowing you to create complex rules.

Availability

This table outlines the Firewall Rules features and entitlements available with each customer plan:

	Free	Pro	Business	Enterprise
Availability	Yes	Yes	Yes	Yes
Number of rules	5	20	100	1,000
Supported actions	All except Log	All except Log	All except Log	All
Regex support	No	No	Yes	Yes

Next steps

• Unless you are already an advanced user, refer to Expressions and Actions to learn more about the basic elements of firewall rules.

• To start building your own firewall rules, refer to one of the following pages:

  • Manage firewall rules in the dashboard
  • Manage firewall rules via the APIs

• You can also manage firewall rules through Terraform. For more information, refer to Getting Started with Terraform ↗.

Related resources

• Cloudflare Rules language