How we built config staging and versioning with HTTP applications
May 12, 2022Garrett Galow
Summary
This post introduces HTTP Applications and Routing Rules, a new system for managing L7 Cloudflare configuration. It details how HTTP Applications allow for versioning of settings (Page Rules, Firewall Rules, cache settings) independent of hostnames. Routing Rules, powered by the Ruleset Engine, map hostnames to specific HTTP Application versions. The system supports staging configurations by routing traffic to specific IPs for testing before production deployment, and allows for quick rollbacks. The underlying mechanism involves an additional lookup after the account/config pair to determine the correct configuration ID (zone vs. HTTP Application version).
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack