导航|地址|刷新
Create an exception

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/ruleset-engine/llms.txt
Use this file to discover all available pages before exploring further.

Docs Directory API SDKs Changelog

Search

Log in

Ruleset Engine

/

Overview

About

Overview

Phases

Rulesets

Rules

Basic API operations

View rulesets

Add rules to phase entry point rulesets

Deploy rulesets

Work with managed rulesets

Overview

Deploy a managed ruleset

Override a managed ruleset

Override examples

Overview

Set WordPress rules to Block

Enable only Joomla rules

Enable only selected rules

Deploy a managed ruleset with ruleset, tag, and rule overrides

Adjust the sensitivity of an HTTP DDoS rule to Low

Adjust an L3/4 DDoS rule ↗

Create an exception

Work with custom rulesets

Overview

Create a custom ruleset

Add rules to a custom ruleset

Deploy a custom ruleset

Rules language

Overview

Expressions

Overview

Edit in the dashboard

Operators and grouping symbols

Values

Actions

Fields

Overview

Fields reference

Functions

Rulesets API

Overview

JSON objects

Endpoints

List and view rulesets

Create a ruleset

Update or deploy a ruleset

Add a rule to a ruleset

Update a rule in a ruleset

Delete a rule in a ruleset

Delete a ruleset

Reference

Phases list

Agent resources

Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

Ruleset Engine llms.txt ↗

Ruleset Engine llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗

Home

/Ruleset Engine

/Work with managed rulesets

/Create an exception

Create an exception

Last updated Apr 16, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewTypes of exceptions Skip all remaining rules Skip one or more managed rulesets Skip one or more rules of managed rulesetsAdditional notes

Use exceptions to skip the execution of a managed ruleset of some of its rules.

The exception configuration includes an expression that defines the skip conditions, and the rules or managed rulesets to skip under those conditions.

If you are using Terraform, refer to Configure exceptions in the Terraform documentation.

If you are using the Cloudflare dashboard, refer to Add an exception in the dashboard.

Note

Currently, only the Cloudflare Web Application Firewall (WAF) supports managed rules exceptions.

Types of exceptions

An exception can have one of the following behaviors (from highest to lowest priority):

Skip all remaining rules in the entry point ruleset

Skip one or more managed rulesets

Skip one or more rules of managed rulesets

You define exceptions in a given context — zone level or account level — and they apply only to that context. For example, if you define an exception that skips all remaining rules at the account level, the rules defined in the entry point ruleset at the zone level will still be evaluated.

If there is a match for the expressions of several exceptions, Cloudflare will consider the exception with the highest priority.

Exceptions only apply to rules executing a managed ruleset listed after them. If you add an exception at the end of the list of rules of an entry point ruleset, nothing will be skipped.

Additional requirement for account-level exceptions

Rules in entry point rulesets at the account level only apply to Enterprise zones. This also includes exceptions (or skip rules). When adding an exception at the account level, you must use parentheses to enclose any custom conditions in the rule expression and end the expression with and cf.zone.plan eq "ENT", or else the API operation will fail.

Skip all remaining rules

To skip all the remaining rules in the entry point ruleset, create a rule with skip action and include "ruleset": "current" in the action_parameters object.

Example of rule definition:
{ "expression": "<RULE_EXPRESSION>", "action": "skip", "action_parameters": { "ruleset": "current" }}
Skipping all remaining rules only affects the rules in the current context (account or zone). For example, adding a rule with skip action to the account-level phase entry point ruleset has no impact on the rules defined in the zone-level phase entry point ruleset — these zone-level rules will still be evaluated.

For a full example, refer to the WAF documentation.

Skip one or more managed rulesets

To skip one or more managed rulesets, create a rule with skip action containing a rulesets field in the action_parameters object. The rulesets field must contain a list of managed ruleset IDs you want to skip.

Example of rule definition:
{ "expression": "<RULE_EXPRESSION>", "action": "skip", "action_parameters": { "rulesets": ["<MANAGED_RULESET_1_ID>", "<MANAGED_RULESET_2_ID>"] }}
For a full example, refer to the WAF documentation.

Skip one or more rules of managed rulesets

To skip one or more rules of managed rulesets, create a rule with skip action containing a rules object in the action_parameters object. The rules object must contain one or more managed ruleset IDs as keys, and a list of rules to skip in those managed rulesets as the value of each key.

Example of a rule definition that skips rules A and B of managed ruleset 1, and rule X of managed ruleset 2:
{ "expression": "<RULE_EXPRESSION>", "action": "skip", "action_parameters": { "rules": { "<MANAGED_RULESET_1_ID>": ["<RULE_A_ID>", "<RULE_B_ID>"], "<MANAGED_RULESET_2_ID>": ["<RULE_X_ID>"] } }}
The rules in the rules object must belong to the specified managed rulesets, otherwise you will get an error.

For a full example, refer to the WAF documentation.

------

Additional notes

Exceptions have priority over overrides.

If you define an exception that skips all remaining rules, the expressions of those rules are not evaluated.

If you define an exception that skips a rule of a managed ruleset, the expression of the rule that executes the managed ruleset is evaluated and the managed ruleset rules are executed except for that specific rule, which is bypassed.

PreviousAdjust an L3/4 DDoS rule ↗NextOverview

Was this helpful?

YesNo

Edit page Report issue

On this page

Overview

Types of exceptions

Skip all remaining rules

Skip one or more managed rulesets

Skip one or more rules of managed rulesets

Additional notes

Edit pageReport issue

Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search

Company
AboutCareersInvestorsPressPress kitGlobal network

Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG

Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse

Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog

Developers
DocumentationLearning centerCommunity

Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform

Start BuildingLog In

© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices

Docs

------
导航页打开网址