下表按照阶段执行的顺序列出了由 Ruleset Engine 提供支持的 Cloudflare 产品的阶段 (phases)。某些产品（如 Cloudflare Web Application Firewall）有多个关联阶段。
网络层 (Network-layer) ↗ 阶段适用于在 Cloudflare 全球网络上接收的数据包。
| 阶段名称 | 用于产品/功能 |
|---|---|
ddos_l4 |
Network-layer DDoS Attack Protection |
magic_transit |
Cloudflare Network Firewall |
magic_transit_managed |
Cloudflare Network Firewall managed rulesets |
magic_transit_ratelimit |
Cloudflare Network Firewall rate limiting policies |
magic_transit_ids_managed |
Cloudflare Network Firewall Intrusion Detection System (IDS) |
应用层 (Application-layer) ↗ 阶段适用于在 Cloudflare 全球网络上接收的请求。
这些阶段按照其在表中出现的顺序执行。
| 阶段名称 | 用于产品/功能 |
|---|---|
http_request_dynamic_redirect |
Single Redirects |
http_request_sanitize |
URL normalization |
http_request_transform |
URL Rewrite Rules |
| N/A (内部阶段) | Waiting Room Rules |
http_request_api_gateway_early* |
API Shield |
http_config_settings |
Configuration Rules |
http_request_origin |
Origin Rules |
ddos_l7* |
HTTP DDoS Attack Protection |
http_request_firewall_custom |
Custom rules (Web Application Firewall) |
http_ratelimit |
Rate limiting rules (WAF) |
http_request_api_gateway_late |
API Shield |
http_request_firewall_managed |
WAF Managed Rules |
http_request_sbfm |
Super Bot Fight Mode |
| N/A (内部阶段) | Cloudflare Access |
http_request_redirect |
Bulk Redirects |
| N/A (内部阶段) | Managed Transforms |
http_request_late_transform |
Request Header Transform Rules |
http_request_cache_settings |
Cache Rules |
http_request_snippets |
Snippets |
http_request_cloud_connector |
Cloud Connector |
* 此阶段仅用于配置目的 — 相应的规则不会在处理请求的此阶段执行。
这些阶段按照其在表中出现的顺序执行。
| 阶段名称 | 用于产品/功能 |
|---|---|
http_custom_errors |
Custom Errors |
| N/A (内部阶段) | Managed Transforms |
http_response_headers_transform |
Response Header Transform Rules |
http_ratelimit |
Rate limiting rules (当它们使用响应信息时) |
http_response_compression |
Compression Rules |
http_response_firewall_managed |
Cloudflare Sensitive Data Detection (Data Loss Prevention) |
http_log_custom_fields |
Logpush custom fields |