What problem does it solve? Configuring Vercel's WAF, DDoS protections, and rate limiting through the vercel firewall CLI is error-prone, and a misconfigured rule can block real users, SEO crawlers, or checkout flows. This Skill provides expert guidance and safe staged workflows for managing platform-level security without taking down production traffic. ## Core Features & Use Cases - Custom WAF Rules: Create, edit, reorder, and inspect firewall rules with conditions on path, headers, geo, user agent, and JA3/JA4 fingerprints, using actions like deny, challenge, log, bypass, and rate_limit. - IP Blocks & System Bypass: Block abusive IPs or CIDRs and exempt trusted networks (offices, CI, uptime monitors) from all firewall checks. - Attack Response & Rate Limiting: Guidance on Attack Mode, system mitigations, and per-endpoint rate limits with safe log-first rollout. - Use Case: Your API is being hammered by a single abusive client. Use this Skill to stage a rate_limit rule on /api in log mode, review the traffic in the dashboard, then tighten and enforce it without affecting legitimate users. ## Quick Start Ask the assistant to add a Vercel firewall rule that rate limits the /api path to 100 requests per minute per IP, staged in log mode first.
