Skip to content

Commit 094f9ea

Browse files
pedrosousaRebeccaTamachiro
authored andcommitted
[Rules] Update troubleshooting (#21043)
1 parent 368596a commit 094f9ea

File tree

1 file changed

+9
-3
lines changed

1 file changed

+9
-3
lines changed

src/content/docs/rules/reference/troubleshooting.mdx

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,12 @@ description: Review common troubleshooting scenarios for Rules features.
1111

1212
import { Example, Render } from "~/components";
1313

14+
## Interaction between redirects and other Cloudflare products
15+
16+
Your redirects may interfere with Cloudflare products and features such as challenges. Consider excluding the [`/cdn-cgi/*` URI path](/fundamentals/reference/cdn-cgi-endpoint/) in your rule expression to avoid issues. Alternatively, you may exclude only a sub-path such as `/cdn-cgi/challenge-platform/*` to avoid issues with specific features (in this example, [Cloudflare challenges](#interaction-between-cloudflare-challenges-and-rules-features)).
17+
18+
You may also want to exclude the `/.well-known/*` URL path used by several validation services. Refer to [Interaction between redirects and verification procedures like HTTP DCV](#interaction-between-redirects-and-verification-procedures-like-http-dcv) for more information.
19+
1420
## Interaction between Cloudflare challenges and Rules features
1521

1622
If you are issuing a [challenge](/waf/reference/cloudflare-challenges/) for a given URI path that has one or more Rules features enabled, you should exclude URI paths starting with `/cdn-cgi/challenge-platform/` in your rule expressions to avoid challenge loops.
@@ -21,11 +27,11 @@ For example, define a compound expression for your rule using the `and` operator
2127
<OTHER_RULE_CONDITIONS> and not starts_with(http.request.uri, "/cdn-cgi/challenge-platform/")
2228
```
2329

24-
## HTTP DCV and redirects
30+
## Interaction between redirects and verification procedures like HTTP DCV
2531

26-
<Render file="dcv-definition" product="ssl" />
32+
Paths used in validation procedures such as custom hostname verification (Cloudflare for SaaS), [Pages domain validation](/pages/configuration/debugging-pages/), or [HTTP domain control validation (DCV)](/ssl/edge-certificates/changing-dcv-method/methods/http/) may be affected by redirects.
2733

28-
If you are using [HTTP DCV](/ssl/edge-certificates/changing-dcv-method/methods/http/) and also have [Single Redirects](/rules/url-forwarding/single-redirects/) set up in your zone, consider excluding the `/.well-known/*` path from your rule to avoid DCV issues. For details and other resources refer to the [SSL/TLS documentation](/ssl/edge-certificates/changing-dcv-method/).
34+
Consider excluding the `/.well-known/*` URI path from your rule to avoid issues.
2935

3036
## Content-Length header removed from response
3137

0 commit comments

Comments
 (0)