Cloudflare IP Access rules / Custom rules / Zone Lockdown の違い

まとめ

• 基本は Custom rules が推奨で事足りる。
• Cloudflare Spectrum に適用したい場合は IP Access rules を使う
• Custom rules で Zone Lockdown 用のルールテンプレートも用意されており、同等の設定が可能
  • https://dash.cloudflare.com/?to=/:account/:zone/security/waf/custom-rules/new?template=Zone%20lockdown

	IP Access rules	Custom rules	Zone Lockdown
IP Address		ip.src
IP Range		ip.src
Country	(Enterprise only)	ip.src.country	No
ASN		ip.src.asnum	No
URL	No	http.request.uri
Actions	• IP Access rules actions Allow (Excludes visitors from all security checks) Block Managed Challenge JavaScript Challenge Interactive Challenge	• Actions reference Skip (Available skip options) Block (will stop the evaluation of other rules) Log Managed Challenge JS Challenge Interactive Challenge	All IP addresses not specified in the Zone Lockdown rule will not have access to the specified resources.
Lists Feature Availability	No		No
Applicable to L4 (Spectrum)?	Configuration options	No	No