Vercel Firewall now lets you create WAF custom rules using natural language. Describe the behavior you need and the dashboard will generate the rule.
Visit the firewall custom rules page to try creating a rate-limiting rule:
Or use the Vercel CLI:
WAF custom rules let you control traffic to your site by logging, blocking, challenging, rate limiting, or redirecting requests based on conditions like IP address, path, country, user agent, and more.
For example, you can:
Log all requests to /api/webhook
with a missing authorization header
Block all requests to /wp-admin
Challenge all traffic to /checkout
that doesn't come from the US
Generate your first rule or learn more in the documentation.