Phases list
Network layer
Network-layer phases apply to packets received on the Cloudflare global network.
| Phase name | Used in product/feature |
|---|---|
ddos_l4 |
Network-layer DDoS Attack Protection |
magic_transit |
Magic Firewall |
mt_managed |
Magic Firewall managed rulesets |
mt_ids_managed |
Magic Firewall Intrusion Detection System (IDS) |
Application layer
Application-layer phases apply to requests received on the Cloudflare global network.
Request phases
The phases execute in the order they appear in the table.
| Phase name | Used in product/feature |
|---|---|
http_request_sanitize |
URL normalization |
http_request_transform |
Rewrite URL Rules |
http_request_origin |
Origin Rules |
http_request_cache_settings |
Cache Rules |
http_config_settings |
Configuration Rules |
http_request_dynamic_redirect |
Single Redirects |
ddos_l7* |
HTTP DDoS Attack Protection |
http_request_firewall_custom |
Web Application Firewall (WAF) |
http_ratelimit |
Rate limiting rules |
http_request_firewall_managed |
Web Application Firewall (WAF) |
http_request_sbfm |
Super Bot Fight Mode |
http_request_redirect |
Bulk Redirects |
| N/A (internal phase) | Managed Transforms |
http_request_late_transform |
HTTP Request Header Modification Rules |
* This phase is for configuration purposes only — the corresponding rules will not be executed at this stage in the request handling process.
Response phases
The phases execute in the order they appear in the table.
| Phase name | Used in product/feature |
|---|---|
| http_custom_errors | Custom error responses |
| N/A (internal phase) | Managed Transforms |
http_response_headers_transform |
HTTP Response Header Modification Rules |
http_response_compression |
Compression Rules |
http_response_firewall_managed |
Cloudflare Sensitive Data Detection (Data Loss Prevention) |
http_log_custom_fields |
Logpush custom fields |