Deploy rulesets
Use the
Rulesets API
to deploy a ruleset. To deploy a ruleset, add a rule with "action": "execute" to a phase entry point ruleset, specifying the ruleset ID to execute as an action parameter. Use a separate rule for each ruleset you want to deploy.
A rule that executes a ruleset consists of:
- The ID of the ruleset you want to execute.
- An expression.
- An action, set to
execute.
The rules in the ruleset execute when a request satisfies the expression.
Example
The following example deploys a Managed Ruleset to the http_request_firewall_managed phase of a given zone (<ZONE_ID>) by adding a rule that executes the Managed Ruleset.
---
header: Request
---
curl -X PUT \
"https://api.cloudflare.com/client/v4/zones/<ZONE_ID>/rulesets/phases/http_request_firewall_managed/entrypoint" \
-H "Authorization: Bearer <API_TOKEN>" \
-d '{
"rules": [
{
"action": "execute",
"action_parameters": {
"id": "<CLOUDFLARE_MANAGED_RULESET_ID>"
},
"expression": "true",
"description": "Execute Cloudflare Managed Ruleset on my zone ruleset"
}
]
}'
---
header: Response
---
{
"result": {
"id": "<ZONE_PHASE_RULESET_ID>",
"name": "Zone-level Ruleset 1",
"description": "",
"kind": "zone",
"version": "latest",
"rules": [
{
"id": "<RULE_ID>",
"version": "1",
"action": "execute",
"action_parameters": {
"id": "<CLOUDFLARE_MANAGED_RULESET_ID>",
"version": "3"
},
"expression": "true",
"description": "Execute Cloudflare Managed Ruleset on my zone ruleset",
"last_updated": "2021-03-18T18:08:14.003361Z",
"ref": "<RULE_REF>",
"enabled": true
}
],
"last_updated": "2021-03-18T18:08:14.003361Z",
"phase": "http_request_firewall_managed"
},
"success": true,
"errors": [],
"messages": []
}
Related resources
Refer to Work with Managed Rulesets and Work with custom rulesets for more information.
For more information on the available API endpoints for editing and deploying rulesets, refer to Update and deploy rulesets .
For examples of deploying rulesets, refer to Workflow examples .