Does ip_rules work?

[mastoj]

I have a very small example:

resource "vercel_firewall_config" "ip-blocking" {
  project_id = "project id"

  ip_rules {
    # deny this subnet for all my hosts
    rule {
      action   = "deny"
      ip       = "51.85.0.0/16"
      hostname = "*"
    }

    rule {
      action   = "challenge"
      ip       = "1.2.3.4"
      hostname = "example.com"
    }

    rule {
      action   = "bypass"
      ip       = "1.1.1.1"
      hostname = "example.com"
    }
  }
}

I expected to get something in "System Bypass Rules", but everything is under IP blocking:

So I wonder if it should be possible to use "challenge" or "bypass" or if I need a custom rule for that.

[dglsparsons]

Hi @mastoj, thanks for raising this! I've reached out to the firewall team and I'll let you know 🙏