Skip to content

Website Settings

On the Website Settings page, you can view and configure WAF rules for a specific website. This includes rate limits, default rules, custom rules, and more.

img.png

1 Rate Limit

Defends against CC attacks, including Access Rate Limit, Attack Rate Limit, and 404 Rate Limit.

1.1 Access Rate Limit

Temporarily blocks an IP if requests exceed the threshold within a time window.

  • Global Mode: Triggers if total requests to any URL exceed the threshold.
  • URL Mode: Triggers if requests to a single URL exceed the threshold.

img.png

2 Default Rules

Built-in WAF rules that block common malicious requests.

2.1 Parameter Rules

Filters malicious query parameters.

2.2 URL Rules

Filters malicious URLs.

2.3 HTTP Rules

Sets allowed HTTP methods. Disable methods you want to block. Example: To allow only GET, disable all other methods.

Filters requests with malicious cookies.

2.5 Header Rules

Filters requests with malicious headers.

2.6 User-Agent Rules

Filters requests with malicious User-Agents.

2.7 Others

SQL Injection Protection and XSS Protection.

3 Custom Rules

Define your own WAF rules according to your needs.

  • Includes custom ACL rules, file upload restrictions, region access control, and CDN settings.

3.1 Custom Rules (✨ Pro Edition)

Create custom WAF rules. Match conditions including URL, IP, Header, Host, and perform actions. Example: Require CAPTCHA for requests to /login.

img.png

3.2 File Upload Restriction

Restrict allowed file types by extension.

img.png

3.3 Region Access Control (✨ Pro Edition)

Block or allow access from specific regions.

img.png

3.4 CDN

Enable if your site uses CDN and real client IPs are not logged correctly:

  • From HTTP Header: Extract from a specified header (e.g., cf-connecting-ip for Cloudflare).
  • From Header List: Auto-detect from common real-IP headers.
  • From X-Forwarded-For: Use the last proxy IP. Example: X-Forwarded-For: client,proxy1,proxy2,proxy3 → use proxy3.

img.png

Take 1Panel Further

Running 1Panel OSS? Pro Edition adds WAF protection, unlimited AI agents, multi-node management, and priority support — starting at $80/year.

Compare OSS vs Pro → Start 30-day free trial →