The following table contains all available objects and attributes you can use in your advanced rules.

ObjectAttributeArgumentsTypeDescription
client_dataContainer
fingerprintDictClient fingerprint object
responseContainerContainer for response context
headersDictA dictionary of the response headers
statusVarStatus code from the origin (integer)
requestContainerContainer for request context
rate_limitFunctionReturns true if the rate limit is exceeded
content_typeStringA string with a maximum of 30 characters (optional)
intervalIntegerAn integer between 1 and +inf
ip_listListA list of 0-10 items: a string representing an UP address (IPv4 or IPv6)
method_listListA list of 0-9 items of: an HTTP method
requestsIntegerAn integer between 20 and +inf
scopeChoiceOne of the following values: IP or cluster
status_listListA list of 0-20 items: an integer between 100 and 999
urlURLA valid URL
ip_in_rangeFunctionReturns true if the client IP is contained within the given range
from_ipIPA string representing an IP address (IPv4 or IPv6)
to_ipIPA string representing an IP address (IPv4 or IPv6)
headersDictA dictionary of the request headers
ipVarA string representing the client IP
is_ajaxFunctionReturns true if the request type is AJAX
is_apiFunctionReturns true if the request is an API call
is_staticFunctionReturns true if the request type is STATIC
methodVarHTTP method (uppercase)
origin_ipVarA string representing the client origin IP
pathVarPath of the URL
query_paramsVarQuery params
upload_file_content_typeVarContent type of the uploaded file (e.g., image/PNG)
upload_file_extensionVarFile extension of the uploaded file (e.g., PNG)
uriVarA full URI string
urlVarA full URL string
allFunctionReturns true if all the given tags exist
anyFunctionReturns true if one or more of the given tags exist
existsFunctionReturns true if the given tag exists
tagStringA string with a maximum of 30 characters
tag_listListA list of 1-10 items of a string with max 30 characters
user_agentContainerThe User-agent header segments in lowercase
clientVarClient name. For example, Chrome, Firefox.
client_typeVarClient type. For example, major, lib.
client_versionVarClient version. For example, 47.1.23.
client_version_floatVarClient version, major.minor part. For example, 47.1.
cpuVarCPU brand. For example, Intel.
deviceVarDevice brand. For example, iPhone, PlayStation.
device_typeVarDevice type. For example, mobile, console.
engineVarEngine type. For example, Gecko, AppleWebKit.
osVarClient’s OS. For example, Linux, Windows 8.
whoisContainerContainer for WHOIS data of the client IP
countryVarCountry code (uppercase)
orgVarOrganization name
owner_typeVarOwner type