From 7842bbcaf5fc5e6ba5eb7b98f2b2103aab97fcb3 Mon Sep 17 00:00:00 2001 From: Marcio Date: Wed, 8 Apr 2026 17:53:04 +0100 Subject: [PATCH 1/2] [WAF] Fix incorrect Spectrum IP Access rules note The note added in #29644 incorrectly stated that IP Access rules are the only mechanism for HTTP/HTTPS Spectrum apps. Per the Spectrum docs and internal wiki, IP Access rules only work for TCP/UDP Spectrum apps. HTTP/HTTPS Spectrum apps should use custom rules instead. Also restores the custom rules link in the caution block that was accidentally removed. --- src/content/docs/waf/tools/ip-access-rules/create.mdx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/content/docs/waf/tools/ip-access-rules/create.mdx b/src/content/docs/waf/tools/ip-access-rules/create.mdx index 243baec6ad7..e91ed163c8b 100644 --- a/src/content/docs/waf/tools/ip-access-rules/create.mdx +++ b/src/content/docs/waf/tools/ip-access-rules/create.mdx @@ -9,11 +9,11 @@ sidebar: import { TabItem, Tabs, Steps, DashButton } from "~/components"; :::caution[Recommendation: Use custom rules instead] -Cloudflare recommends that you create custom rules instead of IP Access rules to perform IP-based or geography-based blocking (geoblocking). +Cloudflare recommends that you create [custom rules](/waf/custom-rules/) instead of IP Access rules to perform IP-based or geography-based blocking (geoblocking). ::: :::note -For [Spectrum](/spectrum/) applications configured with the HTTP/HTTPS application type, IP Access rules are the only supported mechanism for filtering traffic by IP address, IP range, country, or ASN. To use them, enable IP Access rules in your [Spectrum app configuration](/spectrum/reference/configuration-options/#ip-access-rules). +For [Spectrum](/spectrum/) applications configured with the TCP or UDP application type, you can use IP Access rules to filter traffic by IP address, IP range, country, or ASN. To use them, enable IP Access rules in your [Spectrum app configuration](/spectrum/reference/configuration-options/#ip-access-rules). IP Access rules do not apply to HTTP/HTTPS type Spectrum applications — use [custom rules](/waf/custom-rules/) for those instead. ::: From 8918444aa976df6fb84e89c3dd3ff7e1a2bfdcab Mon Sep 17 00:00:00 2001 From: Marcio Date: Wed, 8 Apr 2026 18:21:47 +0100 Subject: [PATCH 2/2] refined --- src/content/docs/waf/tools/ip-access-rules/create.mdx | 4 ---- 1 file changed, 4 deletions(-) diff --git a/src/content/docs/waf/tools/ip-access-rules/create.mdx b/src/content/docs/waf/tools/ip-access-rules/create.mdx index e91ed163c8b..5f80ff48214 100644 --- a/src/content/docs/waf/tools/ip-access-rules/create.mdx +++ b/src/content/docs/waf/tools/ip-access-rules/create.mdx @@ -12,10 +12,6 @@ import { TabItem, Tabs, Steps, DashButton } from "~/components"; Cloudflare recommends that you create [custom rules](/waf/custom-rules/) instead of IP Access rules to perform IP-based or geography-based blocking (geoblocking). ::: -:::note -For [Spectrum](/spectrum/) applications configured with the TCP or UDP application type, you can use IP Access rules to filter traffic by IP address, IP range, country, or ASN. To use them, enable IP Access rules in your [Spectrum app configuration](/spectrum/reference/configuration-options/#ip-access-rules). IP Access rules do not apply to HTTP/HTTPS type Spectrum applications — use [custom rules](/waf/custom-rules/) for those instead. -::: - :::note