What problem does it solve? Configuring and operating the Vercel Firewall (WAF custom rules, IP blocking, rate limiting, Attack Mode) involves many CLI subcommands, staged draft publishing, and risky production changes that can block real users if misconfigured. This Skill provides expert guidance and exact command patterns to manage platform-level security safely. ## Core Features & Use Cases - Custom WAF Rules: Create, edit, reorder, and inspect rules with conditions (path, geo, user agent, JA4 fingerprints) and actions (deny, challenge, log, bypass, rate_limit) using flags or JSON. - Staged Rollout Workflow: Follows a log-first, preview-block, then production-block rollout so new rules never take down legitimate traffic. - Rate Limiting & IP Management: Configure per-IP or per-JA4 rate limits, block IPs/CIDRs, and set system bypass rules for trusted networks. - Use Case: Your API is being hammered by abusive clients. Use this Skill to stage a rate_limit rule on /api with log mode, review hits in the Firewall dashboard, then tighten and publish to production. ## Quick Start Ask the assistant to add a Vercel Firewall rule that rate limits /api to 100 requests per minute per IP and stage it for review.
