Cloudflare DevelopersCD
Cloudflare Developers•9mo ago
ruan

Security WAF rules doesnt work for Cloudflare tunnels?

I have created some rules at DOMAIN > Security > Security rules

For example:

(http.request.method ne “GET” and not len(http.request.headers[“upgrade”]) > 0 and not len(http.request.headers[“connection”]) > 0 and all(http.request.headers[“upgrade”][] ne “websocket”) and all(http.request.headers[“connection”][] ne “upgrade”))

https://i.imgur.com/LxiRh4a.png

Im testing a connection to my tunnel but the rules doesnt seen to work, for example i did a POST request and it didnt got blocked
the rule was suppose to block any request thats not a 
GET


So, these rules doesnt apply to Cloudflare tunnel?
Imgur
Was this page helpful?