Phases list
The following tables list the phases of Cloudflare products powered by the Ruleset Engine, in the order those phases are executed. Some products such as the Cloudflare Web Application Firewall have more than one associated phase.
Network layer
Network-layer phases apply to packets received on the Cloudflare global network.
| Phase name | Used in product/feature |
|---|---|
ddos_l4 |
Network-layer DDoS Attack Protection |
magic_transit |
Magic Firewall |
mt_managed |
Magic Firewall managed rulesets |
mt_ids_managed |
Magic Firewall Intrusion Detection System (IDS) |
Application layer
Application-layer phases apply to requests received on the Cloudflare global network.
Request phases
The phases execute in the order they appear in the table.
| Phase name | Used in product/feature |
|---|---|
http_request_sanitize |
URL normalization |
http_request_transform |
Rewrite URL Rules |
http_request_origin |
Origin Rules |
http_request_cache_settings |
Cache Rules |
http_config_settings |
Configuration Rules |
http_request_dynamic_redirect |
Single Redirects |
ddos_l7* |
HTTP DDoS Attack Protection |
http_request_firewall_custom |
Web Application Firewall (WAF) |
http_ratelimit |
Rate limiting rules |
http_request_firewall_managed |
Web Application Firewall (WAF) |
http_request_sbfm |
Super Bot Fight Mode |
http_request_redirect |
Bulk Redirects |
| N/A (internal phase) | Managed Transforms |
http_request_late_transform |
HTTP Request Header Modification Rules |
* This phase is for configuration purposes only — the corresponding rules will not be executed at this stage in the request handling process.
Response phases
The phases execute in the order they appear in the table.
| Phase name | Used in product/feature |
|---|---|
http_custom_errors |
Custom error responses |
| N/A (internal phase) | Managed Transforms |
http_response_headers_transform |
HTTP Response Header Modification Rules |
http_ratelimit |
Rate limiting rules (when they use response information) |
http_response_compression |
Compression Rules |
http_response_firewall_managed |
Cloudflare Sensitive Data Detection (Data Loss Prevention) |
http_log_custom_fields |
Logpush custom fields |