Cloudflare WAF

cloudflare Web application firewallcloudflare-waf

Web application firewall with Cloudflare managed rulesets, OWASP scoring and custom rules at the edge.

Provider: cloudflare
Kind: Web application firewall
Category: Security
Official docs: https://developers.cloudflare.com/waf/managed-rules/

Properties · 4 set by this component

property	type	values	required	kind default	this component
botProtection	boolean	—	no	—	inherited
customRuleCount	integer	—	no	—	inherited
exposedCredentialsCheck · component property	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ true
managedRuleSet	string	—	no	—	▸ cloudflare-free-managed-ruleset
mode	enum	detection \| prevention \| off	no	—	▸ prevention
owaspParanoiaLevel · component property	enum	pl1 \| pl2 \| pl3 \| pl4	no	pl1	inherited
owaspScoreThreshold · component property	integer	—	no	40	inherited
plan · component property	enum	free \| pro \| business \| enterprise	no	free	inherited
rateLimiting	boolean	—	no	—	▸ true

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "waf", component: "cloudflare-waf" }

Other Web application firewall products · 13

Web Application Firewallalibaba-wafalibabacloudwaf AWS WAF web ACLaws-wafawswaf AWS WAF Classicaws-waf-classicawswaf Azure Web Application Firewallazure-web-application-firewallazurewaf Firewall for AIcloudflare-firewall-for-aicloudflarewaf Corazacorazawaf Imperva Application Securityimpervawaf ModSecuritymodsecuritywaf NAXSInaxsiwaf Generic web application firewallwafwaf Google Cloud Armorgoogle-cloud-armorgcpwaf reCAPTCHA Enterprisegoogle-recaptcha-enterprisegcpwaf Web Application Firewalloci-wafociwaf

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Cloudflare WAF: the Free Managed Ruleset is deployed automatically on every new zone, so the WAF
3# filters (not just logs) out of the box ("Managed Rules", "Get started"); OWASP defaults to
4# paranoia level PL1 and a score threshold of 40 ("OWASP Core Ruleset - Concepts").
5schemaVersion: "1"
6type: "component"
7id: "cloudflare-waf"
8kind: "waf"
9provider: "cloudflare"
10docs: "https://developers.cloudflare.com/waf/managed-rules/"
11defaults:
12  managed: true
13  mode: "prevention"
14  managedRuleSet: "cloudflare-free-managed-ruleset"
15  rateLimiting: true
16properties:
17  plan:
18    type: "enum"
19    values: ["free", "pro", "business", "enterprise"]
20    default: "free"
21  owaspParanoiaLevel:
22    type: "enum"
23    values: ["pl1", "pl2", "pl3", "pl4"]
24    default: "pl1"
25  owaspScoreThreshold:
26    type: "integer"
27    default: 40
28  exposedCredentialsCheck:
29    type: "boolean"
30    default: false

The same page as markdown, for an agent: /catalogue/components/cloudflare-waf.md