Password admin
A signed session cookie. Only then can rules or the file change.
Cloudflare Pages
Static site in /public, password-gated APIs in
functions/api, and a live editor for
_redirects.
Sample _redirects
/home / 301 /docs https://developers.cloudflare.com/pages/configuration/redirects/ 302 /blog/* https://blog.example.com/:splat /products/:code/:name /catalog?code=:code&name=:name /go/cf https://developers.cloudflare.com/ 302
A signed session cookie. Only then can rules or the file change.
Edit the table or the raw file. Download a drop-in file for public/.
functions/api stores rules in KV. Middleware applies them between deploys.