Vercel Firewall now lets you create WAF custom rules using natural language. Describe the behavior you need and the dashboard will generate the rule.
Visit the firewall custom rules page to try creating a rate-limiting rule:
Create a WAF custom rule that rate limits all API requests to 50 per minute per IP. If a single IP exceeds the limit, block subsequent requests for 5 minutes.
Or use the Vercel CLI:
vercel firewall rules add --ai "Rate limit /api to 100 requests per minute by IP"
WAF custom rules let you control traffic to your site by logging, blocking, challenging, rate limiting, or redirecting requests based on conditions like IP address, path, country, user agent, and more.
For example, you can:
Log all requests to /api/webhook with a missing authorization header
Block all requests to /wp-admin
Challenge all traffic to /checkout that doesn't come from the US
Generate your first rule or learn more in the documentation.
