Introducing Advanced Rate Limiting

What this post added

Introduced Advanced Rate Limiting, a new capability integrated with the WAF and Firewall Rules. This feature allows for defining rate limiting rules based on a wide range of HTTP request characteristics (URI, method, headers, cookies, body fields, bot score, JA3 fingerprint) and counting requests based on various dimensions (IP, country, header, cookie, ASN, query parameter value, bot fingerprint). It also enables separating the mitigation expression from the counting expression, allowing for more flexible blocking actions. The post details use cases for protecting web traffic and APIs, including counting based on session ID, request body content, and future support for complexity-based rate limiting.