İstek Alanları

Alan	Anahtar	Tip	Örnek
Host (Domain)	http.host	metin	api.example.com
HTTP Metodu	http.request.method	metin	POST
Path (sorgusuz)	http.request.base_uri	metin	/api/v2/login
URI Son Segmenti	http.request.uri.path	metin	/login (istek /api/v2/login iken)
Sorgu Parametreleri	http.request.uri.query	metin	page=1
URI (sorgu dahil)	http.request.uri	metin	/path?q=1
Tam URI (host+path)	http.request.full_uri	metin	https://example.com/path
HTTP Sürümü	http.request.version	metin	2
Header	http.header	ad=değer	X-Api-Key=secret
Çerez	http.cookie	ad=değer	session=abc
User Agent	http.user_agent	metin	Mozilla/5.0
Referer	http.referer	URL	https://example.com
X-Forwarded-For IP	http.x_forwarded_for	metin	203.0.113.42
TLS Sürümü	tls.version	uint16	772

Örnekler

# Login endpoint'ini bot skoruyla koru
IF   http.request.base_uri has_prefix /login
AND  waf.bot_score ge 60
THEN captcha

# Belirli User-Agent'ı engelle
IF   http.user_agent contains BadBot
THEN block

# API anahtarı eksik istekleri engelle
IF   http.request.base_uri has_prefix /api
AND  http.header not_contains X-Api-Key
THEN block