WAF Minimize length rule

What is the name of the domain?

personal site

What is the issue you’re encountering

WAF rule is limited to 4096 bytes, but it’s possible to reduce some rules

What steps have you taken to resolve the issue?

For example instead of writing
lower(http.user_agent) contains "badbot"
you can write
http.user_agent wildcard "*badbot*"
in order to save 10%

What is the current SSL/TLS setting?

Off

Savings are equal to only 5 characters.

Thank you for suggestion, someone would definitely use this example and others.

The best way is to combine WAF rules when possible and split across other security options available to us customers.

Comes from the new Ruleset engine, and very useful.

You’ve also removed lower. Does Wildcard make the check for badbot case-insensitive?

1 Like

yes absolutely !
see here : Go wild: Wildcard support in Rules and a new open-source wildcard crate
for case sensitive, use strict wildcard

1 Like

Ooh, very nice!

1 Like

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.