I am having hard time figuring ways to configure WAF for Cloudflare pages, When i map a custom domain then i can add WAF for the domain, but if visitors directly hit the cloudflare pages subdomain then they can easily bypass.
Am i missing something here?
You can use Bulk Redirects for the pages.dev itself (don’t enable include subdomains unless you want to break all of your previews):
(Create Bulk Redirects in the dashboard · Cloudflare Rules docs
to get started)
And then for the previews/deployment links, enable Cloudflare Access on them:
Magic link: https://dash.cloudflare.com/?to=/:account/pages/view/:pages-project/settings
This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.