Do WAF rules apply to workers?

Do WAF rules apply to workers? I am currently using a Worker to save files to R2 from an unauthenticated react app. I would like to add an action of Managed Challenge to request method of PUT. I have created a block rule for PUT but they all go through.

WAF rules will rule in front of workers. Can you share your WAF rule

This rule will block access to the Pages hosted app but not the Worker.


That should be working. Do you have the worker on a custom domain or using the domain? You need a custom domain for WAF rules to be able to take effect.


I was not using a custom domain. I have updated the worker with a custom domain, and everything is working as expected.


This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.