Skip to content

Update a web optimization rule

PUT
/domains/{domain}/rules/optimize/{ruleId}
curl --request PUT \
--url https://api.nsin.ir/domains/example.com/rules/optimize/1 \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{ "record_id": 1, "record_ids": [ 1 ], "enabled": true, "priority": 100, "host_pattern": "example", "host_match_type": "", "host_includes": [ "example" ], "host_excludes": [ "example" ], "action_mode": "enforce", "path_match_type": "wildcard", "path_includes": [ "example" ], "path_excludes": [ "example" ], "images": false, "image_quality": 80, "minify_js": false, "minify_css": false, "compress_level": 0 }'

Partial update — omitted fields keep their current value. Requires rules.edit.

domain
required
string

The domain name (for example example.com) — not a numeric id.

Example
example.com
ruleId
required
integer

Numeric id of the rule.

Media type application/json
object
record_id

Deprecated single-record scope. Prefer record_ids.

integer
nullable
record_ids

Scope the rule to these proxied records. Omit or send an empty array for a zone-wide rule. Every id must belong to this domain.

Array<integer>
enabled
boolean
default: true
priority
integer
default: 100
host_pattern
string
host_match_type

How the host filter — host_pattern, host_includes and host_excludes — is matched. One strategy covers all three, exactly as one path_match_type covers both path lists.

The empty string means “no host filter”, and is the only valid value when the pattern and both lists are empty. Set a list without a match type and the API defaults it to wildcard.

A wildcard entry matches subdomains, not the label itself: *.example.com covers shop.example.com but not example.com — the same reading as the DNS wildcard. Add the bare name as its own entry to include it.

string
Allowed values: "" exact wildcard regex
host_includes

Hostnames the rule applies to; empty or omitted means every host. Sending an explicit empty array clears an existing list.

Array<string>
<= 200 items
host_excludes

Hostnames excluded from the rule; excludes beat includes.

Array<string>
<= 200 items
action_mode
  • enforce — the rule acts (block, redirect, challenge, …).
  • dry_run — the rule matches and is logged as “would have acted”, but the request reaches the origin unchanged. Use it to test a rule safely.

Not every rule type honours this; cache ignores it.

string
Allowed values: enforce dry_run
path_match_type

How path_includes and path_excludes are interpreted.

string
Allowed values: wildcard regex
path_includes

Paths the rule applies to. Defaults to ["/*"] — everything.

Array<string>
path_excludes

Paths carved back out of path_includes.

Array<string>
images

Convert JPEG and PNG responses to WebP. Only visitors whose Accept header advertises WebP are served it — those requests occupy a separate cache slot — so a client that cannot decode WebP always receives the original file.

boolean
image_quality

WebP encoder quality. Lower is smaller and lossier. 80 is the recommended balance.

integer
default: 80 >= 40 <= 100
minify_js

Strip comments and whitespace from JavaScript. Identifiers are never renamed.

Note: minifying a script breaks any page that loads it with a Subresource Integrity hash (integrity="sha384-..."), because the bytes no longer match, and it invalidates published source maps. The edge cannot detect either condition.

boolean
minify_css

Strip comments and whitespace from CSS.

boolean
compress_level

Brotli quality for cached text responses. 0 inherits the node default. Lossless, so it carries none of the risk of the other actions. Higher levels are applied in the background after the first response is served, so they never add latency.

integer
0 <= 11

The updated rule.

Media type application/json
object
id
integer
domain_id
integer
record_id

Deprecated single-record scope. Prefer record_ids. Absent for zone-wide rules.

integer
record_ids

The proxied DNS records this rule applies to. Empty or absent means zone-wide — every proxied record of the domain.

Array<integer>
type
string
Allowed values: cache drop redirect rewrite waf captcha rate_limit bot_route origin_pool origin_route fingerprint error_page
enabled
boolean
priority

Evaluation order; lower runs first. Defaults to 100.

integer
host_pattern

Legacy single-hostname filter, kept for rules written before host_includes existed. It is evaluated as one more entry of host_includes; prefer the lists.

string
host_match_type

How the host filter — host_pattern, host_includes and host_excludes — is matched. One strategy covers all three, exactly as one path_match_type covers both path lists.

The empty string means “no host filter”, and is the only valid value when the pattern and both lists are empty. Set a list without a match type and the API defaults it to wildcard.

A wildcard entry matches subdomains, not the label itself: *.example.com covers shop.example.com but not example.com — the same reading as the DNS wildcard. Add the bare name as its own entry to include it.

string
Allowed values: "" exact wildcard regex
host_includes

Hostnames the rule applies to. Empty or absent means every host the scoped record(s) serve — which on a wildcard-proxied zone (*.example.com) is every subdomain.

Array<string>
host_excludes

Hostnames carved back out of host_includes. An exclude always wins over an include, so “everything except staging” is an empty include list plus one exclude.

Array<string>
action_mode
  • enforce — the rule acts (block, redirect, challenge, …).
  • dry_run — the rule matches and is logged as “would have acted”, but the request reaches the origin unchanged. Use it to test a rule safely.

Not every rule type honours this; cache ignores it.

string
Allowed values: enforce dry_run
created_at
string format: date-time
updated_at
string format: date-time
path_match_type

How path_includes and path_excludes are interpreted.

string
Allowed values: wildcard regex
path_includes

Paths the rule applies to. Defaults to ["/*"] — everything.

Array<string>
path_excludes

Paths carved back out of path_includes.

Array<string>
images

Convert JPEG and PNG responses to WebP. Only visitors whose Accept header advertises WebP are served it — those requests occupy a separate cache slot — so a client that cannot decode WebP always receives the original file.

boolean
image_quality

WebP encoder quality. Lower is smaller and lossier. 80 is the recommended balance.

integer
default: 80 >= 40 <= 100
minify_js

Strip comments and whitespace from JavaScript. Identifiers are never renamed.

Note: minifying a script breaks any page that loads it with a Subresource Integrity hash (integrity="sha384-..."), because the bytes no longer match, and it invalidates published source maps. The edge cannot detect either condition.

boolean
minify_css

Strip comments and whitespace from CSS.

boolean
compress_level

Brotli quality for cached text responses. 0 inherits the node default. Lossless, so it carries none of the risk of the other actions. Higher levels are applied in the background after the first response is served, so they never add latency.

integer
0 <= 11
Example
{
"type": "cache",
"host_match_type": "",
"action_mode": "enforce",
"path_match_type": "wildcard",
"images": false,
"image_quality": 80,
"minify_js": false,
"minify_css": false,
"compress_level": 0
}

Malformed body, an invalid field value, or record_ids containing a record that does not belong to this domain.

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Examples
Example foreignRecords
{
"error": "record_ids do not belong to this domain"
}

Missing, malformed, revoked or expired API key — or the owning account is inactive.

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Examples
Example invalidKey
{
"error": "invalid API key"
}

The domain or the rule does not exist, the rule belongs to another domain or another rule type, or your role does not permit this operation.

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Example
{
"error": "read-only API key"
}

The key exceeded its request budget (300 requests per minute by default).

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Examples
Example limited
{
"error": "rate limit exceeded"
}