Authorizations
API key for authentication. Make sure to include the word apikey
, followed by a single space and then your token.
Example: apikey 1234$abcdef
Body
A request to update an advanced WAAP rule
The name assigned to the rule
100
The description assigned to the rule
100
Whether or not the rule is enabled
The action that the rule takes when triggered The action that a WAAP rule takes when triggered
A CEL syntax expression that contains the rule's conditions. Allowed objects are: request, whois, session, response, tags, user_defined_tags
, user_agent
, client_data
.
More info can be found here: https://gcore.com/docs/waap/waap-rules/advanced-rules
1
[
"request.rate_limit([], '.*events', 5, 200, [], [], '', 'ip') and not ('mb-web-ui' in request.headers['Cookie'] or 'mb-mobile-ios' in request.headers['Cookie'] or 'session-token' in request.headers['Cookie']) and not request.headers['session']"
]
The WAAP request/response phase for applying the rule.
The "access" phase is responsible for modifying the request before it is sent to the origin server.
The "header_filter
" phase is responsible for modifying the HTTP headers of a response before they are sent back to the client.
The "body_filter
" phase is responsible for modifying the body of a response before it is sent back to the client.
access
, header_filter
, body_filter
Response
Successful Response