Request Fields

Field	Key	Type	Example
Host (Domain)	http.host	string	api.example.com
HTTP Method	http.request.method	string	POST
Path (without query)	http.request.base_uri	string	/api/v2/login
Last URI Segment	http.request.uri.path	string	/login
Query Parameters	http.request.uri.query	string	page=1
URI (with query)	http.request.uri	string	/path?q=1
Full URI (host+path)	http.request.full_uri	string	https://example.com/path
HTTP Version	http.request.version	string	2
Header	http.header	name=value	X-Api-Key=secret
Cookie	http.cookie	name=value	session=abc123
User Agent	http.user_agent	string	Mozilla/5.0
Referer	http.referer	URL	https://example.com
X-Forwarded-For IP	http.x_forwarded_for	string	203.0.113.42
TLS Version	tls.version	integer (uint16)	772

Examples

# Protect login endpoint from high bot-score traffic
IF   http.request.base_uri has_prefix /login
AND  waf.bot_score ge 60
THEN captcha

# Block a specific User-Agent
IF   http.user_agent contains BadBot
THEN block