Phases list
The following tables list the phases of Cloudflare products powered by the Ruleset Engine, in the order those phases are executed. Some products such as the Cloudflare Web Application Firewall have more than one associated phase.
Network-layer phases apply to packets received on the Cloudflare global network.
| Phase name | Used in product/feature |
|---|---|
ddos_l4 | Network-layer DDoS Attack Protection |
magic_transit | Magic Firewall |
mt_managed | Magic Firewall managed rulesets |
mt_ids_managed | Magic Firewall Intrusion Detection System (IDS) |
Application-layer phases apply to requests received on the Cloudflare global network.
The phases execute in the order they appear in the table.
| Phase name | Used in product/feature |
|---|---|
http_request_sanitize | URL normalization |
http_request_dynamic_redirect | Single Redirects |
http_request_transform | Rewrite URL Rules |
| N/A (internal phase) | Waiting Room Rules |
http_config_settings | Configuration Rules |
http_request_origin | Origin Rules |
ddos_l7* | HTTP DDoS Attack Protection |
http_request_api_gateway | API Gateway |
http_request_firewall_custom | Web Application Firewall (WAF) |
http_ratelimit | Rate limiting rules |
| N/A (internal phase) | API Shield |
http_request_firewall_managed | WAF Managed Rules |
http_request_sbfm | Super Bot Fight Mode |
| N/A (internal phase) | Cloudflare Access |
http_request_redirect | Bulk Redirects |
| N/A (internal phase) | Managed Transforms |
http_request_late_transform | HTTP Request Header Modification Rules |
http_request_cache_settings | Cache Rules |
http_request_snippets | Snippets |
http_request_cloud_connector | Cloud Connector |
* This phase is for configuration purposes only — the corresponding rules will not be executed at this stage in the request handling process.
The phases execute in the order they appear in the table.
| Phase name | Used in product/feature |
|---|---|
http_custom_errors | Custom Error Responses |
| N/A (internal phase) | Managed Transforms |
http_response_headers_transform | HTTP Response Header Modification Rules |
http_ratelimit | Rate limiting rules (when they use response information) |
http_response_compression | Compression Rules |
http_response_firewall_managed | Cloudflare Sensitive Data Detection (Data Loss Prevention) |
http_log_custom_fields | Logpush custom fields |