Introducing Waiting Room Bypass Rules
Jan 19, 2023Arielle Olache, Piper McCorkle

Summary
Introduced Waiting Room Bypass Rules, allowing customers to define conditions for traffic that should bypass the waiting room. This feature is built on the Cloudflare Ruleset Engine, providing a unified rule management interface and enabling fine-grained control over which traffic is queued. The post details the implementation of bypass rules via the dashboard and API, with examples for administrative IP bypass and path exclusions. The core bypass action clears a flag that would trigger waiting room logic.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack