WAF - Updating the WAF maximum payload values
UpdateUnverifiedAdded Sep 24, 2026
We are reinstating the maximum request-payload size the Cloudflare WAF inspects, with WAF on Enterprise zones inspecting up to 128 KB. Key Findings On December 5, 2025 , we initially attempted to increase the maximum WAF payload limit to 1 MB across all plans.
Topics: Pricing
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Dec 5 | Cloudflare Fundamentals, Terraform - Terraform v5.14.0 now availableunverified Update | Update |
| Dec 5 | WAF - Increased WAF payload limit for all plansunverified Update | Update |
| Dec 4 | Hyperdrive - Connect to remote databases during local development with wrangler devunverified Update | Update |
| Dec 4 | Workers - One-click Access protection for Workers now creates reusable Cloudflare Access policiesunverified Preview | Preview |
| Dec 3 | Email security - Reclassifications to Submissionsunverified Update | Update |
| Dec 3 | WAF - WAF Release - 2025-12-03 - Emergencyunverified Update | Update |
| Dec 8 | Workers - Python cold start improvementsunverified Update | Update |
| Dec 8 | Workers - Easy Python package management with Pywranglerunverified Update | Update |
Also shipped on Dec 5, 2025
Cloudflare in December 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Dec 5 |  Neon | 70 projects on Free plan, new Data API settings, Neon is now a Kiro Power release - Dec 05, 2025unverified | Neon | Pricing |
| Dec 5 |  Resend | Pay-as-you-go Pricingunverified | Resend | Pricing |
| Dec 5 |  Replicate | The little things, week ending December 5, 2025unverified | Replicate | Update |
| Dec 5 |  Sigma Computing | What's new in Sigmaunverified | Sigma | Update |
| Dec 5 |  Railway | Smart Canvas, Magic Config IVunverified | Railway | Update |
| Dec 5 |  Okta | Introducing the New ASP.NET Core API SDKunverified | Auth0 | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.