This section collects guides, notes, and technical articles from the blog.
Cloudflare WAF Configuration Guide
Preface The security protections provided by Cloudflare empower all website administrators with equal and robust defense grids. In this article, we’ll explore several practical methods utilizing Cloudflare WAF (Web Application Firewall) rules to secure your sites and services. For deeper insights, consult the official Cloudflare documents—the apex source for detailed breakdowns. Update Notice March 17, 2025: Cloudflare no longer supports the Threat Score cf.threat_score rule field. Now protected automatically via Automated Botnet Protection loops. Read the official blog post for details. WAF Introduction Web Application Firewall (WAF) is a defensive technology inspecting/filtering malicious requests inside HTTP traffic streams to protect web apps. ...