Behind edge ✓host cdn-playground-five.vercel.appproto httpscdn-loop vergcloud-staging; count=1
← Feature map

Firewall lab

Allow vs block fixtures. A blocked probe should return an edge/custom page — not origin JSON.

Setup guide

CDN → Domain [domain] → Security → Firewall → New

Suggested config

  • Name: Block probe evil (letters, numbers, spaces only)
  • Filter: (http.request.uri.path contains "/api/origin/firewall/probe" and http.request.uri.query contains "mode=evil")
  • Action: deny, Enabled: true

Verify

  1. Allow fixture → expect 200 + origin JSON
  2. Probe ?mode=evil → expect 403 firewall_error custom page, not origin JSON
  3. Probe ?mode=benign → expect 200 from origin

Origin routes

All probes are same-origin through the CDN hostname. Open routes in a new tab to compare edge vs origin headers.

No request yet — hit a button above to run a probe.