A web application firewall filters and controls traffic reaching a web application. In production deployment, it adds an application-facing security layer alongside monitoring, logging, and error tracking. section 9.6.3 section 9.6.2
Custom firewall rules can apply several traffic-handling responses:
- Log traffic for inspection without blocking it. section 9.6.3
- Deny requests that match unwanted traffic conditions. section 9.6.3
- Challenge traffic before allowing it through. section 9.6.3
- Bypass selected traffic or rate-limit request volume. section 9.6.3
Configure Vercel Firewall
Open the Firewall page in the Vercel project dashboard and add custom rules to log, deny, challenge, bypass, or rate-limit traffic. For larger applications, combine the firewall with intrusion detection, security audits, and detailed logging. section 9.6.3 section 9.6.2
