Bot Tagging to the Origin Server

最終更新日:2026-08-21 17:47:29

Reading time: About 6 minutes
Prerequisites: The hostname has been onboarded, and the Bot Management master switch is enabled.
Navigation Path: Security Settings > Policies > [Target Hostname] > Bot Management > Bot Tag

Feature Overview

Bot Tag Forwarding to Origin lets you send Bot detection results to your origin server through custom HTTP request headers, so the origin can apply its own business logic for secondary risk control.

Use when:

  • Your website serves different response pages depending on the type of crawler.
  • You run your own risk control system and need to combine edge Bot detection results with further decision-making.

Configuration Steps

  1. Log in to the console and go to the subscribed security product page.
  2. Go to Protection Settings > Policies.
  3. Select the hostname you want to configure, click Edit, and go to the Policies editing page.
  4. Select the Bot Management tab. If the Bot Management master switch is off, turn it on.
  5. Locate the Bot Tag feature and click Configure on the right to open the configuration page.
  6. Add a custom HTTP request header and select the Bot traffic characteristics to tag.
  7. After changing the configuration, click Deploy at the bottom to deploy the configuration (takes 1–3 minutes to take effect).

Configuration Details

Tag Type Description Forwarded Value Value Description Sample Data
Custom Bots Tags the name of the matched Custom Bots policy in the custom HTTP request header. If multiple policies match, the names are separated by semicolons. Custom Bots policy name Text, made up of 2 fields separated by a comma:

The first field is always the policy type (Custom Bots);

The second field is the Custom Bots policy name (if multiple policies match, separated by semicolons).
X-Custom-Bots:Custom Bots,name1;Custom Bots,name2

AI Bots Tags the matched AI Bots policy category in the custom HTTP request header. AI Assistant

AI Search Crawler

AI Data Scraper

Undocumented AI Agent
Text, made up of 2 fields separated by a comma:

The first field is always the policy type (AI Bots);

The second field is the AI Bots category (AI Assistant/AI Search Crawler/AI Data Scraper/Undocumented AI Agent).
X-AI-Bots:AI Bots,AI Assistant
Public Bots Tags the matched Public Bots policy category in the custom HTTP request header. Search Engines

Site Monitor

Page Viewer

Marketing Analysis

Feed Fetcher

Practical Tools
Text, made up of 2 fields separated by a comma:

The first field is always the policy type (Public Bots);

The second field is the Public Bots category (Search Engines/Site Monitor/Page Viewer/Marketing Analysis/Feed Fetcher/Practical Tools).
X-Public-Bots:Public Bots,Search Engines
Bot Score Tags the matched Bot Score in the custom HTTP request header. 1–100 An integer value — the higher the score, the more likely the traffic is a bot.

100: Definite Bots (100% automated)

80–99: Likely Bots (highly likely automated)

2–79: Likely Human (anomalies detected, possibly human)

1: Likely Human (no anomalies detected, highly likely human)
X-Bot-Score:100
Bot Tag Tags the matched Bot Tag(s) in the custom HTTP request header. 1,2,3,4,5,6,7,8,9,10,30,31,32,33,34,35,36,60 Requests are tagged based on the anomalies detected during the access request.

1: Cloud provider IP

2: Threat-intelligence risk IP

3: Proxy IP

4: Forged User-Agent

5: Outdated browser or OS version

6: Client type in the request header does not match the declared User-Agent

7: Browser request headers severely incomplete

8: Browser request headers partially incomplete

9: Known bot tool/library fingerprint

10: Abnormal browser JA4 fingerprint

30: HTTP library

31: Browser automation testing tool

32: Command-line HTTP request tool

33: Scanning tool

34: Crawler tool

35: Proxy tool

36: Fake spider

60: Abnormal clustered behavior
X-Bot-Tags:1

Note:

  • If the Bot Score is 1, no anomalies were detected and there is no corresponding Bot Tag.
  • If the Bot Score is between 2 and 99, the corresponding Bot Tags are: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 60.
  • If the Bot Score is 100, the corresponding Bot Tags are: 30, 31, 32, 33, 34, 35, 36.