---
header: Next-Gen WAF resource limits
lang: en
last_updated: '2026-01-13'
url: https://docs.fastly.com/products/next-gen-waf-resource-limits
---

This guide details the Next-Gen WAF resource limits we set based on your platform. These limits change based on whether you're using a free account or have purchased one of our [packaged offerings](https://www.fastly.com/package-entitlements/). These limits may be further defined on your service order.

> **NOTE:** In addition to the limits described here, you may also encounter resource limits related to the [Network services](https://docs.fastly.com/products/network-services-resource-limits) or [Compute](https://docs.fastly.com/products/compute-resource-limits) products and features on your account.

## Agent response codes

| Item | Limit | Implication |
| ---- | ----- | ----------- |
| Unique [custom agent response codes](https://www.fastly.com/documentation/guides/next-gen-waf/using-ngwaf/agent-response-codes/using-custom-agent-response-codes#limitations) | 5 per site (also known as workspace) | An error informs you that you've reached the limit. |
| Rules that use custom agent response codes | 1000 per site (workspace) | An error informs you that you've reached the limit. |

## Lists

| Item | Limit | Implication |
| ---- | ----- | ----------- |
| [Lists](https://www.fastly.com/documentation/guides/next-gen-waf/using-ngwaf/rules/using-lists-in-rules#limitations-and-considerations) | 25 per corp (also known as account) plus 25 per site (workspace) | An error informs you that you've reached the limit. |
| Items per list | 5000 items | An error informs you that you've reached the limit. |

## Redactions

| Item | Limit | Implication |
| ---- | ----- | ----------- |
| Custom redactions | 100 per site (workspace) | An error informs you that you've reached the limit. |

## Rules

| Item | Limit | Implication |
| ---- | ----- | ----------- |
| [Request rules](https://www.fastly.com/documentation/guides/next-gen-waf/using-ngwaf/rules/working-with-request-rules) | 1000 per corp (account) plus 1000 per site (workspace) | An error informs you that you've reached the limit. |
| [Signal exclusion rules](https://www.fastly.com/documentation/guides/next-gen-waf/using-ngwaf/rules/working-with-signal-exclusion-rules) | 1000 per corp (account) plus 1000 per site (workspace). Signal exclusion rules count against the request rules limits. | An error informs you that you've reached the limit. |
| [Advanced rate limit rules](https://www.fastly.com/documentation/guides/next-gen-waf/using-ngwaf/rules/working-with-advanced-rate-limiting-rules) | 15 per site (workspace) | An error informs you that you've reached the limit. |

## Signals

| Item | Limit | Implication |
| ---- | ----- | ----------- |
| [Custom signals](https://www.fastly.com/documentation/guides/next-gen-waf/using-ngwaf/signals/working-with-custom-signals) | 200 per corp (account) plus 200 per site (workspace) | An error informs you that you've reached the limit. |

## Thresholds

| Item | Limit | Implication |
| ---- | ----- | ----------- |
| [Site alerts](https://www.fastly.com/documentation/guides/next-gen-waf/using-ngwaf/thresholds/configuring-site-alerts) (signal thresholds) | 50 per site (workspace) | An error informs you that you've reached the limit. |