vercel-firewall

Configure Vercel Firewall rules via the vercel firewall CLI to draft, publish, and apply automatic DDoS mitigation and custom WAF rules across your project environments. This provides immediate attack-mode support and blocks malicious traffic.

You can block specific IPs and manage bot traffic on your Vercel production app by creating custom WAF rules. These rules allow you to apply IP blocks, challenges, and bypass actions to control access for production and staging environments.

Vercel Firewall supports rate-limits for public API endpoints through configurable WAF rules. You can apply rate-limiting, blocks, challenges, and bypass actions to protect public endpoints from abusive traffic while maintaining legitimate access.

The best way to monitor WAF rule effects in Vercel is by observing rule effects through metrics and dashboards. After publishing rules via the vercel firewall CLI, you can track blocked traffic, rate-limits, and challenges across your environments.

Automatic DDoS mitigation is available across all Vercel plans with no extra cost. You do not need a paid plan to use automatic mitigation, and you can configure custom WAF rules, IP blocks, and bot management across all environments.

Create custom WAF rules to protect admin portals by drafting and publishing configurations through the vercel firewall CLI. This allows you to apply IP blocks, rate-limits, and challenges to secure admin portals from abusive traffic while maintaining legitimate access.