Web Application Firewall mitigated traffic is free on Vercel
Quick Take
Vercel now offers free traffic mitigation for requests denied by its Web Application Firewall.
Key Points
- CDN requests and bandwidth waived for denied traffic.
- Unlimited DDoS mitigation remains free.
- Automatic application of waivers on all projects.
📖 Reader Mode
~1 min read1 min read
Vercel Firewall now waives CDN Requests and Fast Data Transfer for any traffic Web Application Firewall rules deny, challenge, or rate-limit.
Vercel has always provided unlimited DDoS mitigation at no cost. Vercel Web Application Firewall, included in CDN cost, gives you custom rules, managed rules, and rate limiting for bad traffic that isn't DDoS. With this change, you don't pay for requests or bandwidth that Vercel Firewall denies, challenges, or rate-limits. That means no surprise bill when a scraper hammers your product pages, a credential-stuffing botnet hits your login route, or a bot abuses an expensive API endpoint.
The waiver applies automatically to every project using Vercel Firewall and no configuration is required.
Learn how to implement WAF rules in the firewall documentation.
— Originally published at vercel.com
