Skip to content

docs(waf): document custom rulesets quota limits#31854

Open
zeinjaber wants to merge 1 commit into
productionfrom
docs/DEE-3670-custom-rulesets-quota
Open

docs(waf): document custom rulesets quota limits#31854
zeinjaber wants to merge 1 commit into
productionfrom
docs/DEE-3670-custom-rulesets-quota

Conversation

@zeinjaber

Copy link
Copy Markdown
Collaborator

Summary

Documents the quota limits for account-level custom rulesets.

Changes

  • Added Quota limits section to both dashboard and API documentation
  • Documented the 1,000 rule hard limit across all rulesets on the request path
  • Documented default distribution: 10 rulesets × 100 rules each
  • Added note that redistribution requires Cloudflare Support to update account-level entitlements
  • Added optimization tips for customers to self-service reduce rule count

Related Issue

Fixes DEE-3670

Add quota limits section to account-level custom rulesets documentation:
- 10 rulesets maximum
- 100 rules per ruleset
- 1,000 total rules hard limit across all rulesets on request path

Also document that redistribution requires Cloudflare Support to update
account-level entitlements.

Fixes DEE-3670
@zeinjaber zeinjaber requested review from a team, danielegm, elithrar and hsaxenaCF as code owners July 2, 2026 15:28
@cloudflare-docs-bot

cloudflare-docs-bot Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Review

💡 1 suggestion found in commit bce5dcd.

Code Review

This code review is in beta and may not always be helpful — use your judgment.

No code review issues found.

Conventions

Checks PR title, description, and redirect checklist.

No convention issues found.

Style Guide Review

Suggestions (1)
File Issue
waf/account/custom-rulesets/create-dashboard.mdx line 84 Avoid LLM filler phrases — Line adds Note that each ruleset is limited... Fix: Remove Note that and state the fact directly: Each ruleset is limited to 100 rules...

Redirects

No missing redirect entries found.

Commands

Only codeowners can run commands. Post a comment with the command to trigger it.

Command Description
/review Runs a review now. Incremental if a prior review exists, full if not.
/full-review Re-reviews the entire PR diff from scratch, ignoring incremental history. Useful after a rebase, when you want a fresh review, or if the bot gets out of sync and reports issues that no longer exist.
/ignore-review-limit Permanently lifts the 2-review automatic limit for this PR. Future pushes will trigger reviews as normal.
/disable-auto-review Stops automatic reviews from triggering on future pushes to this PR. Codeowners can still run /review or /full-review manually.

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

This pull request requires reviews from CODEOWNERS as it changes files that match the following patterns:

Pattern Owners
/src/content/docs/waf/ @pedrosousa, @cloudflare/firewall, @cloudflare/appsec-reviewers, @elithrar, @cloudflare/product-owners, @hsaxenaCF, @danielegm

@ask-bonk ask-bonk Bot added documentation Documentation edits content:edit Request for content edits labels Jul 2, 2026

@ask-bonk ask-bonk Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue needs fixing before merge.

MEDIUM — line 84: Step 12 adds a note about quota limits that duplicates the new Quota limits section directly above it. Keeping both creates maintenance risk if limits change in the future.

Posted 1 inline suggestion.

11. Select **Deploy**.

12. Add other rules to the custom ruleset, if needed. You can also duplicate an existing rule in the custom ruleset.
12. Add other rules to the custom ruleset, if needed. You can also duplicate an existing rule in the custom ruleset. Note that each ruleset is limited to 100 rules, and the total number of rules across all rulesets cannot exceed 1,000.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This duplicates the quota limits already documented in the section above. Remove to avoid drift if limits change.

Suggested change
12. Add other rules to the custom ruleset, if needed. You can also duplicate an existing rule in the custom ruleset. Note that each ruleset is limited to 100 rules, and the total number of rules across all rulesets cannot exceed 1,000.
12. Add other rules to the custom ruleset, if needed. You can also duplicate an existing rule in the custom ruleset.

@ask-bonk

ask-bonk Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Reviewed PR #31854. Added documentation and content:edit labels.

Summary of changes
The PR adds a "Quota limits" section to both the API and dashboard docs for account-level custom rulesets, documenting the 1,000-rule hard limit, the default distribution (10 rulesets × 100 rules), and that redistribution requires Cloudflare Support. It also adds self-service optimization tips (consolidating rules, removing unused rules, using IP lists).

Issue flagged

  • MEDIUMsrc/content/docs/waf/account/custom-rulesets/create-dashboard.mdx line 84: Step 12 was updated to repeat the quota limits inline, but this information is already covered in detail in the new Quota limits section directly above it. Keeping both creates maintenance risk if limits change. Posted an inline suggestion to remove the redundant sentence.

Everything else looks clean: no MDX syntax issues, links are correctly formatted, and the content is consistent between both files.

github run

@zeinjaber zeinjaber enabled auto-merge (squash) July 2, 2026 21:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

content:edit Request for content edits documentation Documentation edits product:waf size/s

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants