Snippets

Cloudflare Snippets (beta) provide a powerful and flexible way to customize the behavior of your website or application using short pieces of JavaScript code. With Snippets, you can modify HTTP response headers, implement JWT validation, perform complex redirects, and much more.

For code samples addressing common use cases, please refer to the Examples section.

Note

Snippets require that you proxy the DNS records of your domain (or subdomain) through Cloudflare.

Snippets elements

To create and deploy a snippet, you need to define the following elements:

• Code snippet: JavaScript code to be executed during the request-handling process.
• Snippet rule: A filter expression that determines which requests the Snippet will be applied to. Each snippet can only be associated with one snippet rule.

For more information, refer to How it works and Create a snippet in the dashboard.

Note

If you have used the Cloudflare API to create a code snippet that is not associated with a snippet rule, the Cloudflare dashboard will show that code snippet in a separate tab called Unused Snippets. You can either edit the snippet code and associate it with a snippet rule, or delete the unused code snippet.

Templates

Cloudflare provides you with rules templates for common use cases. In the dashboard, go to your zone > Rules > Overview, select Templates, and then select one of the available templates. You can also refer to the Examples gallery in the developer docs.

Availability

Updated Limits

We are gradually rolling out new limits for all customers. The values listed below are the new standard limits, but some customers may still have the previous limits until the rollout is fully completed during the first half of 2025.

	Free	Pro	Business	Enterprise
Availability	No	Yes	Yes	Yes
Number of snippets	0	25	50	300
Number of subrequests	0	2	3	5

Each subrequest in a redirect chain counts against the subrequest limit. This means that if a subrequest was redirected it would count as two subrequests. To avoid issues, ensure that you make a subrequest to the end location of the redirect chain.

Limits

Cloudflare Snippets are designed for fast, lightweight edge logic. The following limits apply:

Description	All plans
Maximum execution time	5 ms
Maximum memory	2 MB
Maximum total package size	32 KB

Need guidance on choosing between Snippets and Workers?

Explore our detailed guide for best practices, real-world use cases, and example implementations.

Execution order

The execution order of Rules features is the following:

• Origin Rules
• Cache Rules
• Configuration Rules
• Single Redirects
• Bulk Redirects
• Snippets

The different types of rules listed above will take precedence over Page Rules. This means that Page Rules will be overridden if there is a match for both Page Rules and the Rules products listed above.

Generally speaking, for non-terminating actions the last change made by rules in the same phase will win (later rules can overwrite changes done by previous rules). However, for terminating actions (Block, Redirect, or one of the challenge actions), rule evaluation will stop and the action will be executed immediately.

For example, if multiple rules with the Redirect action match, Cloudflare will always use the URL redirect of the first rule that matches. Also, if you configure URL redirects using different Cloudflare products (Single Redirects and Bulk Redirects), the product executed first will apply, if there is a rule match (in this case, Single Redirects). Refer to the Phases list for the product execution order.

Warning

Using Cloudflare challenges along with Rules features may cause challenge loops. Refer to Rules troubleshooting for more information.