Rules
Open Firewall in the sidebar, then Rules. A rule matches requests and decides what happens to them. You can match on:
- the visitor's IP address or a range of addresses;
- the visitor's country;
- the request path.
A matching request is blocked with a clear page that includes a request ID, which makes it easy to find the event later.
Rate limits
A rate limit allows a number of requests in a time window and rejects the rest. Use one on a login route, a search endpoint or anything else that is expensive or easy to abuse. Limits apply per visitor address.
Seeing what was blocked
Home summarises recent firewall activity, and Insights breaks it down by rule, country and path. Every decision is recorded, so you can check whether a rule is catching what you intended and nothing more.
Tips
- Start narrow. Block a specific address or path before blocking a whole country.
- Check Insights after adding a rule to confirm it matches what you expect.
- Rate limit the routes that do real work, not static files.