{
  "slug": "railway-waf-under-attack-commands-manage-service-waf-mode-a0282fbb553f",
  "title": "railway waf under-attack commands manage service WAF mode",
  "tools": [
    "railway"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-06-20T10:30:16.000Z",
  "announced_at": "2026-06-20T10:30:16.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When managing a service’s Under Attack Mode, check its state or enable or disable it. An applied public domain is required; use `--duration` when enabling timed mode.",
    "examples": [
      "railway waf under-attack status --service <SERVICE> --json",
      "railway waf under-attack enable --service <SERVICE> --duration 1h --json",
      "railway waf under-attack disable --service <SERVICE> --json"
    ],
    "gotchas": [
      "Version: v5.20.0",
      "--service, -s <SERVICE>: Targets a service by name or ID.",
      "--environment, -e <ENVIRONMENT>: Selects an environment by name or ID.",
      "--project, -p <PROJECT_ID>: Selects a project. The WAF-specific docs do not document this selector.",
      "--json: Outputs results in JSON format.",
      "--duration <DURATION>: Sets enable duration. WAF docs show `1h`; allowed values from the release note are `forever`, `1h`, `3h`, `12h`, `24h`.",
      "Prerequisite: An applied public domain is required; Under Attack Mode is service-scoped.",
      "A service must have an applied public domain before WAF settings can be managed. If no applied domain is available, status reports WAF as unavailable and explains that a public domain is required.",
      "Docs conflict: The opened Railway CLI documentation is on the current `main` branch and does not establish behavior specifically at v5.20.0. It shows the `1h` duration example but does not document the complete duration set in the release note."
    ]
  },
  "why_it_matters": "When managing a service’s Under Attack Mode from the CLI, check its status or enable or disable the mode.",
  "sources": [
    "https://github.com/railwayapp/cli/releases/tag/v5.20.0",
    "https://github.com/railwayapp/cli/pull/983",
    "https://github.com/railwayapp/railway-skills/blob/main/plugins/railway/skills/use-railway/references/configure.md",
    "https://docs.railway.com/cli/global-options"
  ],
  "rank": 0.98034,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave1b-20261016",
    "verdict_id": "wave1b-20261016:wave1b-20261016-e93fe07707a9c649-0:gate",
    "evidence_hash": "8cf4c2742906830d7ed062730af3f9b8dc7b235f983c7b77b1c83a31a6394fee"
  },
  "review": {
    "draft_hash": "d0a711153dbd1427d4e7aa7eef7b20b927a2964fcf63672f900fc90c95c6960c",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave1b-20261016:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.98 >= 0.9; 2 needed) and Jev gave 0.78 (>= 0.6 needed)."
  }
}