---
title: Firewall
description: Filter, challenge, or block incoming traffic with rules.
url: "https://vercel.com/kb/firewall"
published: 2025-11-06
last_updated: 2025-11-06
install_vercel_plugin: npx plugins add vercel/vercel-plugin
---

# Firewall

Filter, challenge, or block incoming traffic with rules.

## All Firewall guides

- [How to prepare your storefront for Black Friday traffic](/kb/guide/black-friday-preparation): A practical checklist for keeping your storefront fast and your checkout path healthy through Black Friday and Cyber Monday traffic, from load testing to instant rollback.
- [Supporting Compliance with Vercel WAF](/kb/guide/supporting-compliance-with-vercel-waf): Vercel Firewall provides edge-based traffic filtering and monitoring to help teams meet compliance requirements in security and regulatory frameworks, including PCI DSS, ISO 27001, SOC 2, and HIPAA.
- [How to conduct PCI scans on Vercel: A complete guide to IP safelisting](/kb/guide/how-to-conduct-pci-scans-on-vercel-guide): Scan and verify your Vercel deployments for secure, PCI-compliant payment processing.
- [Should I use Cloudflare in front of Vercel?](/kb/guide/cloudflare-with-vercel): Information on using Cloudflare together with Vercel.
- [Using Self-hosted \& Reverse Proxies with Vercel](/kb/guide/how-to-setup-verified-proxy): Learn about using self-hosted or reverse proxies with Vercel deployments.
- [How to block bots from OpenAI GPTBot](/kb/guide/how-to-block-bots-openai-gptbot): Learn how to use the Vercel WAF to block, rate limit, or challenge traffic from OpenAI GPTBot.
- [Can I use a proxy on top of my Vercel Deployment?](/kb/guide/can-i-use-a-proxy-on-top-of-my-vercel-deployment): General information about using an external proxy to serve a Vercel Deployment.
- [Protect Sensitive Routes with Vercel WAF: Challenge and Deny Rule Recipes](/kb/guide/suspicious-traffic-in-specific-countries): Use Vercel WAF custom rules to block or challenge unwanted traffic by country, ASN, IP address, user agent, path, or cookie, without redeploying.
- [Challenge cURL requests](/kb/guide/challenge-curl-requests): Learn how to challenge curl requests with the Vercel WAF API.
- [Emergency Redirect](/kb/guide/emergency-redirect): Learn how to implement an emergency redirect without re-deploying your site.
- [Firewall Terraform Configuration](/kb/guide/firewall-terraform-configuration): Learn how to create scalable firewall configurations with Terraform
- [Block PHP requests](/kb/guide/block-php-requests): Learn how to block traffic looking for .php vulnerabilies.
- [Limit Abuse with Rate Limiting](/kb/guide/limit-abuse-with-rate-limiting): Learn how to protect your authentication endpoints against abuse.
- [Blocking traffic from a specific IP address.](/kb/guide/traffic-spikes): Learn how to block traffic from a specific IP address.

## Explore other topics in the Vercel Knowledge Base

- [Jev from TypeSafe AI](/kb/jev-from-typesafe-ai): Jev is TypeSafe AI's System One model for fast, typed decisions. It evaluates supplied context and returns choices, scores, and probabilities that applications can use to classify requests, route tasks, and assess proposed actions without generating prose.
- [Vercel Sandbox](/kb/vercel-sandbox): The compute primitive designed to safely run untrusted or user-generated code on Vercel.
- [FDE Field Notes](/kb/fde): Insights from our work with customers. Explore the patterns, diagnostics, and recommendations Vercel’s Forward Deployed Engineers use in production.
- [Software Factory](/kb/software-factory): Software factories put an agent on every stage of your development loop: triage, planning against a live repo checkout, implementation verified with your own checks, and independent review. Work items become draft PRs while you keep the judgment calls.