Updated Rulesets - the new WAF ships with updated rulesets that provide better control separating rule status from action.All while improving performance and security.

This engine will allow us to have faster managed rule deployments and the ability to scale to the next level by allowing the WAF to be deployed on even more traffic.

A new matching engine - written in Rust and supporting the wirefilter syntax - the same syntax used by custom Firewall Rules.

Turning on all WordPress rules, setting all Cloudflare Managed Rules to LOG or figuring out which rules are not running is now easy.

Better rule browsing and configuration - easy one click deploy without losing the power tools: advanced filtering, bulk editing, rule tags and more.

As one of the most used products in the portfolio, we have gained a lot of feedback and experience from running it at scale, that helped guide us in this major iteration. The Web Application Firewall (WAF) is a core component of the Cloudflare platform. Enterprise customers may migrate early by contacting their account team. This percentage will increase to 100% of new accounts over the month of April, after which migration efforts will commence for existing customers. Starting today, 10% of newly created accounts on Cloudflare will be given access to the new WAF whenever a Pro plan zone or above is added. We are now excited to announce a new Cloudflare Web Application Firewall.

For some time, we have been working on replacing that original LuaJIT code John wrote with new code, written in Rust, along with an improved UI. That’s necessary as our enormous growth makes yesterday’s solutions unworkable. The original code that filters this traffic was written by Cloudflare’s now CTO and the WAF has since received many accolades including the highest score for ability to execute in the 2020 Gartner Magic Quadrant for WAF.īecause we value replacing code when it is no longer as maintainable, performant, or scalable as it once was, we regularly rewrite key parts of the Cloudflare stack. That is 650k blocked HTTP requests per second. The Cloudflare Web Application Firewall (WAF) blocks more than 57 billion cyber threats per day. This post is also available in 简体中文, 繁體中文, 日本語, Bahasa Indonesia and ไทย.

Web application firewall