Security-IT
Practical security tips for developers - Cloudflare, WAF, Rate Limiting and more.
Cloudflare Security
Practical guides to protect your applications using Cloudflare security features.
Categories
Custom Rules
Custom rules to block, challenge, or allow traffic based on specific conditions.
Use cases:
- Protect administrative routes
- Block specific countries
- Challenge suspicious bots
Rate Limiting
Control the number of requests per IP, user, or endpoint.
Use cases:
- Protect login against brute force
- Limit API calls
- Prevent credential stuffing
IP Access Rules
Manage IP whitelist and blacklist, ASNs, and countries.
Use cases:
- Whitelist trusted services
- Block known malicious IPs
- Geoblocking
Expressions Library
Library of ready-to-use expressions for your rules.
Includes:
- Bot detection expressions
- User-agent filters
- Suspicious URL patterns
Access Levels
| Feature | Free | Pro | Business | Enterprise |
|---|---|---|---|---|
| Custom Rules | 5 | 20 | 100 | 1000 |
| Rate Limiting | Basic | Advanced | Advanced | Advanced |
| IP Access Rules | Unlimited | Unlimited | Unlimited | Unlimited |
| WAF Managed Rules | Basic | Full | Full | Full |