Manage rules via the APIs

Cloudflare offers APIs that work together to achieve the same effect as the UI-based Firewall rules feature under Security > WAF.

Deprecation notice

Firewall rules have been deprecated. Cloudflare has moved existing firewall rules to WAF custom rules. For more information on this change, refer to the migration guide.

These APIs are the following:

• Firewall Rules API: Manage firewall rules and their actions, based on criteria separately defined through filters.
• Filters API: Manage the filters that enable rule matching.
• Lists API: Manage named lists of items (such as IP addresses) that you can use in the rules of different Cloudflare products.