
3/29/2021 · Michael Tremante
What this post added
This post introduces a complete rewrite of the Cloudflare Web Application Firewall (WAF) engine in Rust, utilizing the wirefilter syntax. It details improvements in rule browsing and configuration with a new UI, updated rulesets including a modernized OWASP Core Ruleset with paranoia levels and better false positive rates, and the introduction of global configuration capabilities for managing rulesets across an entire account. The new engine aims for better performance, scalability, and security.