Cloudflare WAF Zone Names vs. Worker URLs

When configuring WAF rules for Cloudflare Workers, use the zone name only, not the full worker URL.

Use: my-account.workers.dev
Don’t use: <worker-name>.my-account.workers.dev

WAF rules operate at the zone level, so they filter by zone, not individual worker instances.

References

• Cloudflare WAF Custom Rules
• workers.dev Configuration

Credits

Thanks to sjr from the Cloudflare community for this clarification.