Build a sequence rule within custom rules

You can build an API sequence rule via the Cloudflare dashboard.

Old dashboard

1. Log in to the Cloudflare dashboard ↗, and select your account and domain.
2. Go to Security > WAF > Custom rules.
3. To create a new empty rule, select Create rule.
4. Enter a descriptive name for the rule in Rule name.
5. Under When incoming requests match, use the Field drop-down list and select:
   • Current Operation
   • Previous Operations
   • Elapsed time
6. Under Value, build a sequence by selecting a hostname for the sequence.
7. Select the checkbox for each endpoint in the order that you want them to appear in the sequence.
8. Set the time to complete.
9. Select Save.
10. Under Then take action, select the rule action in the Choose action dropdown. For example, selecting Block tells Cloudflare to refuse requests that match the conditions you specified.
11. (Optional) If you selected the Block action, you can configure a custom response.
12. Under Place at, select the order of when the rule will fire.
13. To save and deploy your rule, select Deploy. If you are not ready to deploy your rule, select Save as Draft.

New dashboard

1. In the Cloudflare dashboard, go to the Security rules page.

   Go to Security rules

2. To create a new empty rule, select Create rule > Custom rules.

3. Enter a descriptive name for the rule in Rule name.

4. Under When incoming requests match, use the Field drop-down list to filter by Sequences and select from:

   • Current Operation
   • Previous Operations
   • Elapsed time

5. Under Value, select the edit icon to use Builder and build a sequence on the side panel.

6. Under Select a hostname for this sequence, choose all or a specific hostname from the dropdown list. Optionally, you can use the search bar to search for a specific hostname.

7. From the Methods dropdown list, choose all methods or a specific request method.

8. Select the checkbox for each endpoint in the order that you want them to appear in the sequence.

9. Set the time to complete.

10. Select Save.

11. Under Then take action, select the rule action in the Choose action dropdown. For example, selecting Block tells Cloudflare to refuse requests that match the conditions you specified.

12. (Optional) If you selected the Block action, you can configure a custom response.

13. Under Place at, select the order of when the rule will fire.

14. To save and deploy your rule, select Deploy. If you are not ready to deploy your rule, select Save as Draft.

Note

The fields in the custom rule are populated as a grouped sequence based on the values that you entered on Builder.