Cf.bot_management.verified_bot vs. cf.client.bot

WAF Custom rules define cf.client.bot as a good bot.

WAF Rate limiting rules define cf.bot_management.verified_bot as a good bot, apparently.

What’s the diff and if same, why 2 different properties?

Anything with cf.bot_management.* requires an enterprise plan with bot management. Doesn’t provide different information but has a different context.

1 Like

i have the free plan and the verified bot choice was there in the dropdown. hard to believe cloudflare would provide that option without it actually working, no warning or anything.

image

I’m pretty sure that cf.bot_management.verified_bot is used with rate limiting because cf.client isn’t available in rate limiting.

1 Like

As for the question

the answer is: none.

cf.bot_management.verified_bot
Boolean When true, this field indicates the request originated from a known good bot or crawler. Provides the same information as cf.client.bot

2 Likes

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.