将 HTTP DDoS 规则的敏感度调整为 Low

按照以下步骤覆盖 Cloudflare HTTP DDoS Attack Protection 托管规则集中特定规则的敏感度（sensitivity）。

添加规则到一个阶段以部署 Cloudflare HTTP DDoS Attack Protection 托管规则集。由于该规则集默认启用，您只需在希望定义一个或多个覆盖时才需要部署此特定规则集。
配置规则覆盖，设置特定规则的 sensitivity_level。

示例

以下示例使用更新区域入口点规则集操作在单个 PUT 请求中执行这两个步骤。

将 ddos_l7 阶段入口点规则集中的规则设置为执行 Cloudflare HTTP DDoS Attack Protection 托管规则集（ID 为 <HTTP_DDOS_RULESET_ID>）的单一规则。
为 ID 为 <RULE_ID> 的规则创建一个覆盖，并将规则敏感度设置为 low。所有其他规则使用 Cloudflare 定义的默认敏感度。

Required API token permissions

At least one of the following token permissions is required:

Response Compression Write
Config Settings Write
Dynamic URL Redirects Write
Cache Settings Write
Custom Errors Write
Origin Write
Managed headers Write
Zone Transform Rules Write
Mass URL Redirects Write
Magic Firewall Write
L4 DDoS Managed Ruleset Write
HTTP DDoS Managed Ruleset Write
Sanitize Write
Transform Rules Write
Select Configuration Write
Bot Management Write
Zone WAF Write
Account WAF Write
Account Rulesets Write
Logs Write
Logs Write

Update a zone entry point rulesetbash

curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets/phases/ddos_l7/entrypoint" \
	--request PUT \
	--header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
	--json '{
		"rules": [
				{
						"action": "execute",
						"expression": "true",
						"action_parameters": {
								"id": "<HTTP_DDOS_RULESET_ID>",
								"overrides": {
										"rules": [
												{
														"id": "<RULE_ID>",
														"sensitivity_level": "low"
												}
										]
								}
						}
				}
		]
	}'