Cloudflare Docs
Firewall Rules
Cloudflare Docs
Firewall Rules
GitHub icon
Visit Firewall Rules on GitHub
Set theme to dark (⇧+D)
  1. Products
  2. Firewall Rules
  3. Manage rules in the dashboard
  4. Preview rules

Preview firewall rules

The expression of a firewall rule can become quite complex. In this situation, you should test your firewall rule before deploying it to ensure that the rule will behave as expected.

Rule Preview helps you understand the potential impact of a firewall rule, by testing the rule against a sample drawn from the last 72 hours of traffic. Rule Preview is built into the firewall rules Expression Editor so that you can test a rule as you edit it.

​​ Test a firewall rule with Rule Preview

  1. Locate the desired rule in the rules list and select Edit (wrench icon).
  2. Select Test rule to trigger the test.

The Test Rule button next to the Action drop-down list allows you to check the traffic that would be affected by the current firewall rule

The results of the test are displayed in a plot that simulates how many of the total requests in the last 72 hours would have matched the tested expression.

In this screenshot, a rule that matches all User-Agents that contain the string Mozilla would block about 8% of requests to the zone:

Example chart of a rule preview operation, stating that about 8% of the zone requests would be blocked by the current rule

​​ Important notes

Consider the results of Firewall Preview an indication of traffic levels, not an exact calculation. The sample rate can be as little as 1% of your total traffic.

Rule Preview does not take into account other firewall rules that you have already configured. In effect, Rule Preview tests a single firewall rule in isolation. Security events or any other rules with a higher priority that may have blocked or challenged a request are ignored.

You cannot test firewall rules that reference IP Lists.

Cloudflare does not store the entirety of requests, so only a limited number of fields are available to Rule Preview. The table below lists the fields that Rule Preview supports (green cells), broken down by operator. Fields and operators that are not supported are not included in this table.

Equal Not equal Greater than Less than Greater than or equal Less than or equal In Contains
AS Number
ip.geoip.asnum 		✅ ✅ ✅ ✅ ✅ ✅ ✅ ❌
Country
ip.geoip.country 		✅ ✅ ❌ ❌ ❌ ❌ ✅ ❌
Hostname
http.host 		✅ ✅ ❌ ❌ ❌ ❌ ✅ ✅
IP Address
ip.src 		✅ ✅ ❌ ❌ ❌ ❌ ✅ ❌
Referer
http.referer 		✅ ✅ ❌ ❌ ❌ ❌ ❌ ✅
Request method
http.request.method 		✅ ✅ ❌ ❌ ❌ ❌ ✅ ❌
SSL
ssl 		✅ ❌ ❌ ❌ ❌ ❌ ❌ ❌
URI
http.request.uri 		✅ ✅ ❌ ❌ ❌ ❌ ❌ ❌
URI path
http.request.uri.path 		✅ ✅ ❌ ❌ ❌ ❌ ✅ ✅
URI query string
http.request.uri.query 		✅ ✅ ❌ ❌ ❌ ❌ ❌ ✅
User agent
http.user_agent 		✅ ✅ ❌ ❌ ❌ ❌ ❌ ✅