Upload Too Large

What It Means

The request was larger than your WAF’s maximum upload size, so it was blocked before it reached your application. This block code was previously labelled “Malicious Request”.

Why It Matters

The upload size limit protects your application from very large request bodies. It applies to every request, so legitimate file uploads larger than the limit are blocked too.

Common Triggers

• Users uploading files (CSV imports, documents, images, video) larger than the limit
• API clients sending large payloads or base64-encoded files

What To Do

Raise the limit under Traffic Rules > Upload Size in your WAF dashboard. See Maximum Request Size for the available options.

Allowlisting does not lift this limit. An upload over the limit is blocked even from an allowlisted IP or to an allowlisted path, so raise the limit instead.