Introducing hostname and ASN lists to simplify WAF rule creation
Nov 15, 2023Daniele Molteni
Summary
Introduced hostname and ASN list types to Cloudflare's Custom Lists feature, expanding on the existing IP list functionality. These new list types are available on all Enterprise plans and can be used in WAF rules to match against http.host and ip.src.asnum fields respectively. The post details the usage of these lists, including wildcard support for hostnames and considerations for using ASN lists. It also outlines quota limits for custom lists and previews the upcoming string list type.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack