导航|地址|刷新
Fields

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/ruleset-engine/llms.txt
Use this file to discover all available pages before exploring further.



DocsDirectoryAPISDKsChangelog

Search

Log in






Ruleset Engine

/




Overview


About


Overview

Phases

Rulesets

Rules






Basic API operations


View rulesets

Add rules to phase entry point rulesets

Deploy rulesets






Work with managed rulesets


Overview

Deploy a managed ruleset

Override a managed ruleset


Override examples


Overview

Set WordPress rules to Block

Enable only Joomla rules

Enable only selected rules

Deploy a managed ruleset with ruleset, tag, and rule overrides

Adjust the sensitivity of an HTTP DDoS rule to Low

Adjust an L3/4 DDoS rule ↗





Create an exception






Work with custom rulesets


Overview

Create a custom ruleset

Add rules to a custom ruleset

Deploy a custom ruleset






Rules language


Overview


Expressions


Overview

Edit in the dashboard





Operators and grouping symbols

Values

Actions


Fields


Overview

Fields reference





Functions






Rulesets API


Overview

JSON objects

Endpoints

List and view rulesets

Create a ruleset

Update or deploy a ruleset

Add a rule to a ruleset

Update a rule in a ruleset

Delete a rule in a ruleset

Delete a ruleset






Reference


Phases list






Agent resources


Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

Ruleset Engine llms.txt ↗

Ruleset Engine llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗













Home

/Ruleset Engine

/Rules language

/Fields



Fields


Last updated Apr 16, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewDifferences from Wireshark display fields




The Cloudflare Rules language supports different types of fields such as:

Request fields that represent the basic properties of incoming requests, including specific fields for accessing request headers, URI components, and the request body.

Dynamic fields that represent computed or derived values, typically related to threat intelligence about an HTTP request.

Response fields that represent the basic properties of the received response.

Raw fields that preserve the original request values for later evaluations.

Refer to the Fields reference for the list of available fields.


Differences from Wireshark display fields


Most fields supported by the Cloudflare Rules language use the same naming conventions as Wireshark display fields ↗. However, there are some subtle differences between Cloudflare and Wireshark:


Wireshark supports CIDR (Classless Inter-Domain Routing) notation ↗ for expressing IP address ranges in equality comparisons (ip.src == 1.2.3.0/24, for example). Cloudflare does not.

To evaluate a range of addresses using CIDR notation, use the in comparison operator as in this example: ip.src in {1.2.3.0/24 4.5.6.0/24}.



In Wireshark, ssl is a protocol field containing hundreds of other fields of various types that are available for comparison in multiple ways. However, in the Rules language ssl is a single Boolean field that indicates whether the connection from the client to Cloudflare is encrypted.



The Cloudflare Rules language does not support the slice operator.



PreviousActionsNextFields reference


Was this helpful?

YesNo

Edit pageReport issue




On this page

Overview

Differences from Wireshark display fields


Edit pageReport issue














Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search


Company
AboutCareersInvestorsPressPress kitGlobal network




Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG


Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse




Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog


Developers
DocumentationLearning centerCommunity




Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform


Start BuildingLog In












© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices








Docs




------
导航页 打开网址