Tous les produits
Search
Centre de documentation

Edge Security Acceleration:Match fields

Dernière mise à jour :Aug 12, 2026

Les champs de correspondance définissent les attributs de requête qu'ESA évalue dans les expressions de règle. Ils permettent de cibler des attributs HTTP, IP ou TLS spécifiques au sein des requêtes.

Catégories de champs

ESA prend en charge trois types de champs de correspondance :

  • Champs standard : Attributs issus des protocoles standard (HTTP, IP, TLS) présents dans les requêtes client, tels que le nom d'hôte et les en-têtes de requête.

  • Champs étendus : Valeurs dérivées calculées par ESA à partir des requêtes client, comme les empreintes TLS ou les résultats de vérification JavaScript.

  • Champs d'origine : Propriétés non modifiées des requêtes client, conservées par ESA entre les différents modules fonctionnels.

Champs standard

Les champs standard représentent les attributs HTTP et IP extraits des requêtes client.

http.cookie

En-tête Cookie d'une requête HTTP.

Nom du champ

Cookie

Type

String

Sensible à la casse

Oui

Valeur de correspondance vide

Autorisée

Exemple

"sessionid=330688;userid=abc123"

http.host

Nom d'hôte indiqué dans une requête HTTP.

Nom du champ

Nom d'hôte

Type

String

Sensible à la casse

Non

Valeur de correspondance vide

Non autorisée

Exemple

"www.example.com"

Restrictions d'utilisation

http.referer

En-tête Referer d'une requête HTTP.

Nom du champ

Referer

Type

String

Sensible à la casse

Non

Valeur de correspondance vide

Autorisée

Exemple

"http://www.example.com/index"

Restrictions d'utilisation

http.request.body.form

Corps de la requête au format formulaire lorsque l'en-tête Content-Type est défini sur application/x-www-form-urlencoded, représenté sous forme de Map (tableau associatif).

Nom du champ

Chaîne de requête du corps

Type

Map<Array<String>>

Exemple

{"username":["admin"]}

Restrictions d'utilisation

http.request.body.mime

Type MIME détecté dans le corps de la requête HTTP. Ce champ couvre les types MIME courants pour les contenus vidéo, audio, image, applicatifs et textuels.

Nom du champ

Type MIME

Type

String

Exemple

"application/json"

Restrictions d'utilisation

http.request.cookies

En-tête Cookie d'une requête HTTP, représenté sous forme de map (tableau associatif).

Nom du champ

Valeur du cookie

Type

String

Sensible à la casse

Oui

Valeur de correspondance vide

Autorisée

Exemple

{"sessionid":["330668"]}

Restrictions d'utilisation

http.request.full_uri

URI complète d'une requête HTTP, incluant le protocole, le nom d'hôte, le chemin d'accès et la chaîne de requête.

Nom du champ

URI complète

Type

String

Sensible à la casse

Oui

Valeur de correspondance vide

Non autorisée

Exemple

"https://www.example.com/image/cat.jpg?width=400&height=300&format=webp"

Restrictions d'utilisation

http.request.headers

Ensemble des en-têtes d'une requête HTTP, représentés sous forme de map (tableau associatif). Les noms d'en-tête (clés) sont normalisés en minuscules.

Nom du champ

En-tête

Type

Object

Sensible à la casse

Oui

Valeur de correspondance vide

Autorisée

Exemple

{"content-type":["application/json"]}

Restrictions d'utilisation

http.request.method

Méthode de la requête HTTP.

Nom du champ

Méthode de requête

Type

String

Exemple

"GET"

Restrictions d'utilisation

http.request.timestamp.sec

Horodatage UNIX (en secondes) correspondant à la réception d'une requête HTTP par le POP ESA.

Nom du champ

Horodatage de la requête

Type

Integer

Exemple

1735019278

Restrictions d'utilisation

http.request.uri

URI d'une requête HTTP, comprenant le chemin d'accès et la chaîne de requête.

Nom du champ

URI

Type

String

Sensible à la casse

Oui

Valeur de correspondance vide

Non autorisée

Exemple

"/image/cat.jpg?width=400&height=300&format=webp"

Restrictions d'utilisation

http.request.uri.args

Chaîne de requête contenue dans l'URI d'une requête HTTP, représentée sous forme de map (tableau associatif).

Nom du champ

Paramètre de chaîne de requête URI

Type

Map<Array<String>>

Sensible à la casse

Oui

Valeur de correspondance vide

Autorisée

Exemple

{"format":["webp"]}

Restrictions d'utilisation

Une valeur nulle est uniquement admise avec les opérateurs de correspondance suivants : égal à, différent de, contient ou correspond à l'expression régulière.

http.request.uri.path

Composante de chemin d'accès de l'URI d'une requête HTTP.

Nom du champ

Chemin URI

Type

String

Sensible à la casse

Oui

Valeur de correspondance vide

Non autorisée

Exemple

"/image/cat.jpg"

Restrictions d'utilisation

http.request.uri.path.extension

Extension de fichier présente dans le chemin URI d'une requête HTTP.

Nom du champ

Extension de nom de fichier

Type

String

Sensible à la casse

Oui

Valeur de correspondance vide

Non autorisée

Restrictions d'utilisation

Chemin URI

Valeur du champ

/cat

""

/cat.jpg

"jpg"

/.jpg

""

/.cat.jpg

"jpg"

/cat.jpg.tar

"tar"

/cat.

""

/cat.JPG

"JPG"

http.request.uri.path.file_name

Nom de fichier (sans extension) situé dans le chemin URI d'une requête HTTP.

Nom du champ

Nom de fichier

Type

String

Sensible à la casse

Oui

Valeur de correspondance vide

Non autorisée

Restrictions d'utilisation

Chemin URI

Valeur du champ

/cat

"cat"

/cat.jpg

"cat"

/.jpg

""

/.cat.jpg

".cat"

/cat.jpg.tar

"cat.jpg"

/cat.

"cat"

/CAT.jpg

"CAT"

http.request.uri.path.full_file_name

Nom de fichier complet (extension incluse) présent dans le chemin URI d'une requête HTTP.

Nom du champ

Nom de fichier complet

Type

String

Sensible à la casse

Oui

Valeur de correspondance vide

Non autorisée

Exemple

"cat.jpg"

Restrictions d'utilisation

http.request.uri.query

Chaîne de requête de l'URI d'une requête HTTP.

Nom du champ

Chaîne de requête URI

Type

String

Sensible à la casse

Oui

Valeur de correspondance vide

Non autorisée

Exemple

"width=400&height=300&format=webp"

Restrictions d'utilisation

http.request.version

Version du protocole HTTP utilisée par la requête.

Nom du champ

Version HTTP

Type

String

Exemple

"HTTP/1.0", "HTTP/1.1", "HTTP/2.0", "HTTP/3.0"

Restrictions d'utilisation

http.response.headers

En-têtes de réponse provenant du serveur d'origine, représentés sous forme de map (tableau associatif). Les noms d'en-tête (clés) sont normalisés en minuscules.

Nom du champ

En-têtes de réponse HTTP

Type

Object

Sensible à la casse

Oui

Valeur de correspondance vide

Autorisée

Exemple

{"content-type":["application/json"]}

Restrictions d'utilisation

Actuellement pris en charge uniquement par la fonctionnalité Modify Inbound Response Headers.

http.response.code

Code d'état HTTP de la réponse du serveur d'origine.

Nom du champ

Code d'état de réponse HTTP

Type

String

Sensible à la casse

Non

Valeur de correspondance vide

Non autorisée

Exemple

403

Restrictions d'utilisation

Actuellement pris en charge uniquement par la fonctionnalité Modify Inbound Response Headers.

http.user_agent

En-tête User-Agent d'une requête HTTP.

Nom du champ

User Agent

Type

String

Sensible à la casse

Oui

Valeur de correspondance vide

Autorisée

Exemple

"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.X.X Safari/537.36"

Restrictions d'utilisation

http.x_forwarded_for

En-tête X-Forwarded-For d'une requête HTTP.

Nom du champ

X-Forwarded-For

Type

String

Sensible à la casse

Oui

Valeur de correspondance vide

Autorisée

Exemple

"192.168.0.1, 10.10.0.1"

Restrictions d'utilisation

ip.geoip.asnum

Numéro de système autonome (ASN) associé à l'adresse IP source. Si l'adresse IP ne peut pas être identifiée, la valeur par défaut 0 est utilisée. Pour plus d'informations, consultez Qu'est-ce qu'un ASN ?

Nom du champ

ASN

Type

Integer

Exemple

37963

Restrictions d'utilisation

ip.geoip.continent

Continent associé à l'adresse IP source. La valeur par défaut XX s'applique lorsque le continent ne peut pas être identifié.

Nom du champ

Continent

Type

String

Exemple

AS

Restrictions d'utilisation

Nom du continent

Code du continent

Afrique

AF

Antarctique

AN

Asie

AS

Europe

EU

Amérique du Nord

NA

Océanie

OC

Amérique du Sud

SA

ip.geoip.country

Pays ou région associé à l'adresse IP source. La valeur par défaut XX s'applique lorsque le pays ou la région ne peut pas être identifié. Pour plus d'informations, consultez la norme ISO 3166.

Nom du champ

Pays ou région

Type

String

Sensible à la casse

Non

Valeur de correspondance vide

Non autorisée

Exemple

"CN"

Restrictions d'utilisation

ip.src

Adresse IP utilisée par le client pour se connecter au POP ESA.

Nom du champ

IP client

Type

Adresse IP

Sensible à la casse

Non

Valeur de correspondance vide

Non autorisée

Exemple

192.0.2.1

Restrictions d'utilisation

ip.src.isp

Fournisseur d'accès Internet (ISP) associé à l'adresse IP source.

Nom du champ

ISP

Type

String

Exemple

"100017"

Restrictions d'utilisation

Nom de l'ISP

Code ISP

China Telecom

100017

China Mobile

100025

China Unicom

100026

China Netcom

100016

China Tietong

100020

Great Wall Broadband

100061

China Education and Research Network (CERNET)

100027

China Broadcasting Network

1000139

Beijing Gehua CATV Network

100080

Dr.Peng Group

1000143

Alibaba

100098

Alibaba Cloud

1000323

Tencent

1000401

Baidu

100099

ChinaNetCenter

100093

ip.src.version

Version du protocole IP de l'adresse IP source.

Nom du champ

Version IP

Type

String

Exemple

"IPv4", "IPv6"

Restrictions d'utilisation

ip.src.subdivision_1_iso_code

Code ISO de la subdivision administrative de premier niveau (province ou état, par exemple) pour l'adresse IP source. Pour plus d'informations, consultez la norme ISO 3166.

Nom du champ

Province

Type

String

Sensible à la casse

Oui

Exemple

"CN-ZJ"

Restrictions d'utilisation

ip.src.region_code

Code de région de l'équilibreur de charge associé à l'adresse IP source.

Nom du champ

Région de l'équilibreur de charge

Type

String

Sensible à la casse

Oui

Exemple

"EAS"

Restrictions d'utilisation

Nom de la région

Code de région

Europe de l'Est

EEU

Europe de l'Ouest

WEU

Amérique du Nord

NAM

Amérique du Sud

SAM

Moyen-Orient

ME

Afrique du Nord

NAF

Afrique du Sud

SAF

Océanie

OC

Asie de l'Est

EAS

Asie du Sud-Est

SEAS

Asie du Sud

SAS

Chine continentale

CNM

Remarque

Ce champ est uniquement pris en charge dans les équilibreurs de charge.

ip.src.city

Code de ville associé à l'adresse IP source. La valeur par défaut XX s'applique lorsque l'adresse IP ne peut pas être identifiée.

Remarque

La précision des nœuds ESA pour l'identification géolocalisée au niveau de la ville est limitée. N'utilisez pas ce champ pour des scénarios de blocage de requêtes.

Nom du champ

Code de ville

Type

String

Exemple

"310000"

Restrictions d'utilisation

ip.src.city_name

Nom de ville associé à l'adresse IP source. La valeur par défaut XX s'applique lorsque l'adresse IP ne peut pas être identifiée.

Nom du champ

Nom de la ville

Type

String

Exemple

"hangzhou"

Restrictions d'utilisation

ip.src.lon

Longitude associée à l'adresse IP source. La valeur par défaut XX s'applique lorsque l'adresse IP ne peut pas être identifiée.

Nom du champ

Longitude

Type

Float

Exemple

120.12

Restrictions d'utilisation

ip.src.lat

Latitude associée à l'adresse IP source. La valeur par défaut XX s'applique lorsque l'adresse IP ne peut pas être identifiée.

Nom du champ

Latitude

Type

Float

Exemple

30.16

Restrictions d'utilisation

ip.src.postal_code

Code postal associé à l'adresse IP source. La valeur par défaut XX s'applique lorsque l'adresse IP ne peut pas être identifiée.

Nom du champ

Code postal

Type

String

Exemple

"310000"

Restrictions d'utilisation

ip.src.timezone

Fuseau horaire associé à l'adresse IP source. La valeur par défaut XX s'applique lorsque l'adresse IP ne peut pas être identifiée.

Nom du champ

Fuseau horaire

Type

String

Exemple

"UTC+8"

Restrictions d'utilisation

ssl

Indique si la requête utilise un chiffrement SSL/TLS.

Nom du champ

SSL/HTTPS

Type

Boolean

Exemple

true

Restrictions d'utilisation

Champs étendus

Les champs étendus capturent des attributs allant au-delà des protocoles standard (IP, HTTP, TLS) dans les requêtes client.

ali.ja3_hash

Empreinte JA3, correspondant au hachage MD5 des champs Client Hello lors de la négociation TLS (version TLS, suites cryptographiques, extensions, courbes elliptiques et format de point).

Nom du champ

Empreinte JA3

Type

String

Exemple

d0bfcdbbf2c6aeb4e0fbcf8234fd6cb6

Restrictions d'utilisation

ali.ja4

Empreinte JA4. JA4 étend JA3 en intégrant des informations supplémentaires sur la négociation afin d'améliorer l'unicité et la précision de l'empreinte.

Nom du champ

Empreinte JA4

Type

String

Exemple

d0bfcdbbf2c6aeb4e0fbcf8234fd6cb6

Restrictions d'utilisation

ali.js_detection.passed

Indique si le client a réussi le défi de vérification JavaScript.

Nom du champ

JavaScript vérifié

Type

Boolean

Exemple

true

Restrictions d'utilisation

ali.static_resource

Indique si la requête cible une ressource statique.

Nom du champ

Requête statique

Type

Boolean

Exemple

true

Restrictions d'utilisation

ali.tls_client_auth.cert_verified

Indique si le certificat client a passé la vérification lors de l'authentification TLS mutuelle (mTLS).

Nom du champ

Certificat client vérifié

Type

Boolean

Exemple

true

Restrictions d'utilisation

ali.tls_hash

Valeur de hachage dérivée des informations de négociation TLS de la requête.

Nom du champ

Empreinte TLS

Type

String

Exemple

ABC123HASH

Restrictions d'utilisation

ali.site.name

Nom du site correspondant au domaine présent dans l'URL de la requête client.

Nom du champ

Nom du site

Type

String

Exemple

"example.com"

Restrictions d'utilisation

Champs d'origine

Les champs d'origine conservent les valeurs non modifiées des requêtes client entre les différents modules fonctionnels d'ESA.

http.request.body.raw

Contenu brut non traité du corps d'une requête HTTP.

Nom du champ

Corps de requête HTTP

Type

String

Exemple

"ABC123"

Restrictions d'utilisation

Prise en charge des champs de correspondance selon les fonctionnalités

Match fields(Select Match fields from the list below to view supported fields.)

Query result

Please select a row in the "Match fields" list above to see how the field is supported in each Feature (indicated by ✓/—).

ali.ja3_hash support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer×
Function routing×
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ali.ja4 support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer×
Function routing×
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ali.js_detection.passed support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer×
Function routing×
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ali.static_resource support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer×
Function routing×
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ali.tls_client_auth.cert_verified support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer×
Function routing×
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ali.tls_hash support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer×
Function routing×
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.cookie support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.host support across different features

FeatureSupported
SSL/TLS rules
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.referer support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.body.form support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer×
Function routing×
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.body.mime support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer×
Function routing×
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.body.raw support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer×
Function routing×
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.cookies support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.full_uri support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.headers support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.method support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.timestamp.sec support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer
Function routing×
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.uri support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.uri.args support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.uri.path support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.uri.path.extension support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.uri.path.file_name support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules×
WAF custom rules×
WAF rate limiting rules×
WAF managed rules×
WAF scan protection rules×
WAF allowlist rules×
BOT Advanced mode×

http.request.uri.path.full_file_name support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer×
Function routing×
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.uri.query support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.request.version support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.user_agent support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

http.x_forwarded_for support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.geoip.asnum support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.geoip.continent support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.geoip.country support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.src support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.src.isp support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.src.region_code support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer
Function routing×
Security rules×
WAF custom rules×
WAF rate limiting rules×
WAF managed rules×
WAF scan protection rules×
WAF allowlist rules×
BOT Advanced mode×

ip.src.subdivision_1_iso_code support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.src.version support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ali.site.name support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules×
Rewrite URL×
Modify inbound request headers×
Modify outbound request headers×
Modify inbound response headers×
Modify outbound response headers×
Custom response code×
Request redirect×
Error code redirect×
Cache rules×
Network optimization rules×
File compression×
Image optimization×
Video processing×
Origin rules×
Waiting room rules×
Version management×
Load balancer×
Function routing×
Security rules×
WAF custom rules×
WAF rate limiting rules×
WAF managed rules×
WAF scan protection rules×
WAF allowlist rules×
BOT Advanced mode

ip.src.city support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.src.city_name support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.src.lon support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.src.lat support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.src.postal_code support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ip.src.timezone support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode

ssl support across different features

FeatureSupported
SSL/TLS rules×
HTTPS rules
Rewrite URL
Modify inbound request headers
Modify outbound request headers
Modify inbound response headers
Modify outbound response headers
Custom response code
Request redirect
Error code redirect
Cache rules
Network optimization rules
File compression
Image optimization
Video processing
Origin rules
Waiting room rules
Version management
Load balancer
Function routing
Security rules
WAF custom rules
WAF rate limiting rules
WAF managed rules
WAF scan protection rules
WAF allowlist rules
BOT Advanced mode