PS I’ve sent of an Email to support to see if I can just disable the WAF entirely. At this point I don’t think it buys much value for projecting my infra 😅 I only require Cloudflare in front of my infra to protect it from assholes that might want to DDoS either my infra directly or that of my ISP’s Network (has happened before).

If I can still have DDoS protection without the WAF, I’ll disable it.