Cloudflare WAF (Web Application Firewall) rules + a script for their automatic updates. Block unwanted and malicious requests to enhance the security of your origin server!

A beautiful, out-of-the-box Cloudflare WAF custom page template.

Create optimized Cloudflare WAF rules across many sites in bulk

Automatically block traffic on Cloudflare's side based on Nginx Log parsing.

A Node.js script that automates the reporting of malicious IP addresses detected by Cloudflare WAF to AbuseIPDB ☁️🕵️

C# client library for Cloudflare API: DNS, Zones, R2, D1, Workers, WAF, and more. Strongly-typed with resilience built-in.

A Powerful Cloudflare WAF Anti DDoS rule I made for preventing bots, VPNs/Proxies, Old browsers, and Cloud IPs from accessing your website.

Cloudflare WAF Ruleset to block common Layer7 DDoS Attacks more effectively.

Simple Python script that will detect timeout, and enable Cloudflare custom WAF rules

My cloudflare setup for reducing malicious attacks. Also has a rule for vpn providers.

V2 Enterprise Refactor: High-availability SaaS architecture for R2Upload. Features a decoupled Next.js edge and Laravel 12 API core. Engineered for Zero-Egress cloud economics utilizing Cloudflare R2 Vaults and Supervisord-managed Redis workers. Orchestrated via Kamal 2 for >99.9% uptime.

This repository provides a complete Cloudflare WAF setup guide, including custom rules for bot protection, country blocking, and CAPTCHA verification. Learn how to configure firewall settings step by step to secure your website against threats.

🦕☁️🔥 Deno module for easy, type-safe building and validation of Cloudflare firewall expressions.

iCloud Private Relay IP List Manager for Cloudflare Lists

Manage WordPress in the Hexo way (using Github Actions to automatically update articles to WordPress), adding support of Cloudflare WAF bypass and CloudFlare-ImgBed image hosting service on the basis of the original author.用Hexo的方式管理WordPress(使用Github Actions自动更新文章到WordPress)，在原作者基础上增加Cloudflare WAF绕过功能及CloudFlare-ImgBed图床功能。

A Node.js script that automates the reporting of malicious IP addresses detected by Cloudflare WAF to SniffCatDB ☁️🕵️

Cloudflare WAF and edge security reference: current Rules Engine syntax, OWASP-aligned custom rules, rate limiting, and origin lockdown configurations for Apache, Nginx, and UFW. Sanitized rule expressions with preview-mode discipline. Part of Web Stack Defense.

Turnstile Widget for React is a lightweight wrapper around Cloudflare's Turnstile widget.

Cloudflare ASN Filter automates creation and synchronization of Cloudflare WAF Custom Rules from a CSV of Autonomous System Numbers (ASNs). Each ASN row specifies whether it is enabled and which action Cloudflare should take for requests originating from that ASN.