VercelAgustin Falco1 min readrelease notesintro
Vercel WAF for Blob is now generally available
Summary
Vercel has made its Web Application Firewall for Blob storage generally available. It lets you add edge‑evaluated IP, country, and path rules to block or rate‑limit traffic to stored objects without changing code, helping cut unwanted bandwidth and costs.
- Vercel WAF for Blob is now generally available on all plans and retains any rules configured during the beta period.
- Custom firewall rules (IP, country, path) can deny, challenge, or rate‑limit requests to Blob objects, using the same syntax as deployment WAF rules.
- Enabling protection is a UI toggle in the Blob store Settings; no code changes or URL modifications are required.
- Rules are evaluated at Vercel's edge, blocking unwanted traffic before any data transfer, which can reduce bandwidth costs.
Teams using Vercel Blob for user uploads, media, or paid downloads should care because edge‑level WAF protects data and reduces unnecessary egress charges.
3/10





