Rate limiting rulesets

Rate limiting rules allow you to define a rate limit for requests matching an expression, and the action to perform when that rate limit is reached. You can configure rate limiting rules for a single zone or at the account level.

Account-level rate limiting rulesets allow you to define rate limiting rules once and deploy them to multiple Enterprise zones. Instead of configuring the same rules in each zone, you create a ruleset at the account level and control which zones it applies to.

To apply a rate limiting ruleset at the account level:

1. Create a rate limiting ruleset with one or more rate limiting rules.
2. Deploy the ruleset to one or more zones on an Enterprise plan.

For more information on how Cloudflare calculates request rates, refer to Request rate calculation.

For instructions on creating and deploying a rate limiting ruleset, refer to the following pages:

• Create a rate limiting ruleset in the dashboard
• Create a rate limiting ruleset using the API

For Terraform examples, refer to Rate limiting rules configuration using Terraform.