--- description: Test, deploy, and roll back zone configuration changes safely. title: Cloudflare Version Management image: https://developers.cloudflare.com/og-docs.png --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/version-management/llms.txt > Use this file to discover all available pages before exploring further. # Cloudflare Version Management Last updated Aug 25, 2026|Copy as Markdown|[View as Markdown](https://4f1c5cd2.previews.developers.cloudflare.com/version-management/index.md)|[Agent setup](https://4f1c5cd2.previews.developers.cloudflare.com/agent-setup/) Safely test, deploy, and roll back changes to your zone configurations using Version Management. Enterprise-only ## Benefits By using Version Management, you can: * Create independent versions to make changes with no risk of impacting live traffic. * Safely deploy changes to staging environments ahead of deploy to production. * Quickly roll back deployed changes when issues occur. ## Availability | | Free | Pro | Business | Enterprise | | ------------ | ---- | --- | -------- | ---------- | | Availability | No | No | No | Yes | For access, [enable](https://4f1c5cd2.previews.developers.cloudflare.com/version-management/how-to/enable/) Zone Versioning in the Cloudflare dashboard. ## Limitations Version Management does not currently support or have limited support for the following products or features: API Shield * Some [API Shield](https://4f1c5cd2.previews.developers.cloudflare.com/api-shield/) configurations are not cloned when a new zone version is created. * Customers are allowed to opt-in to remove the UI block that prevents enabling Version Management. Authenticated Origin Pull * [Authenticated Origin Pull](https://4f1c5cd2.previews.developers.cloudflare.com/ssl/origin-configuration/authenticated-origin-pull/) does not work with Zone Versioning. * Accessing your domain from an allowlisted IP returns a Cloudflare 520 error. Cache * [Cache Reserve](https://4f1c5cd2.previews.developers.cloudflare.com/cache/advanced-configuration/cache-reserve/) is intended for production use only. * Purging the production environment purges all environments. Cache Rules when used with Cloudflare Images * [Image Resizing](https://4f1c5cd2.previews.developers.cloudflare.com/images/) does not work with the `additional_cacheable_ports` [Cache Rule](https://4f1c5cd2.previews.developers.cloudflare.com/cache/how-to/cache-rules/) setting and Zone Versioning. * If you use `additional_cacheable_ports` with Image Resizing, the image will be resized every time it is requested and will result in low performance. Workers Cache API * [Workers Cache API](https://4f1c5cd2.previews.developers.cloudflare.com/workers/runtime-apis/cache/) does not work with Version Management. * If you use the Workers Cache API with Zone Versioning, you might encounter unexpected caching behaviours. China Network * Regardless of the version deployed to production, traffic in China will always target the root zone. * Other incompatibility issues with Access and ICP licenses. Cloudflare API * Version Management environments — including their routing expressions and version assignments — can be managed through the public [Environments API](https://4f1c5cd2.previews.developers.cloudflare.com/api/resources/zones/subresources/environments/). * Creating, cloning, and editing zone versions (the configuration snapshots themselves) are currently only available through the [Cloudflare dashboard ↗](https://dash.cloudflare.com/). Domain-scoped Roles * [Domain-scoped Roles](https://4f1c5cd2.previews.developers.cloudflare.com/fundamentals/manage-members/roles/#domain-scoped-roles) apply only to your root zone. * Once a new version is created, these roles do not copy over and they lose access to versions. Image Transformations * Changes made to [Image Transformations](https://4f1c5cd2.previews.developers.cloudflare.com/images/optimization/transformations/overview/) are not cloned when a new zone version is created. Network Error Logging * [Network Error Logging](https://4f1c5cd2.previews.developers.cloudflare.com/network-error-logging/) configurations are not cloned when a new version is created. Client-side security * [Client-side security](https://4f1c5cd2.previews.developers.cloudflare.com/client-side-security/) (formerly known as Page Shield) is not available for versioning and is only configurable under your Global Configuration. Rules * Version Management does not currently support the following: * [Snippets](https://4f1c5cd2.previews.developers.cloudflare.com/rules/snippets/) * [Compression Rules](https://4f1c5cd2.previews.developers.cloudflare.com/rules/compression-rules/) Security Insights * [Security Insights](https://4f1c5cd2.previews.developers.cloudflare.com/security/security-insights/) are not shown when Zone Versioning is enabled and the first version is deployed to production. Terraform * Version Management does not currently support [Terraform](https://4f1c5cd2.previews.developers.cloudflare.com/terraform/). * Customers should either use Terraform or Version Management. WAF Attack Score * [WAF Attack Score](https://4f1c5cd2.previews.developers.cloudflare.com/waf/detections/attack-score/) configurations are not cloned when a new zone version is created. Waiting Room * [Waiting Room](https://4f1c5cd2.previews.developers.cloudflare.com/waiting-room/) users active on the site may be placed back in the queue. * Waiting Room users in the queue may lose their place in line. * Traffic may exceed limits. Wrangler * If a version has a Worker route, it might disappear when a Worker is deployed via [Wrangler](https://4f1c5cd2.previews.developers.cloudflare.com/workers/wrangler/). * If two versions have the same custom domains, the Worker might randomly choose between them. ## Requirements To use Version Management, the following must all be true: * Your zone is on an Enterprise plan. * Your zone is in an [active](https://4f1c5cd2.previews.developers.cloudflare.com/dns/zone-setups/reference/domain-status/) state. * Your zone uses [WAF managed rules](https://4f1c5cd2.previews.developers.cloudflare.com/waf/managed-rules/). * Your zone has migrated to use [custom rules](https://4f1c5cd2.previews.developers.cloudflare.com/waf/custom-rules/) instead of Firewall Rules (deprecated). * Your account uses the [new WAF ↗](https://blog.cloudflare.com/new-cloudflare-waf/) (if not, contact your account team). * Your user account must have a Super Administrator or Administrator [role](https://4f1c5cd2.previews.developers.cloudflare.com/fundamentals/manage-members/roles/). **Zone Versioning** roles cannot create new versions. * Your user account must have an API Key provisioned (if not, [view your API Key](https://4f1c5cd2.previews.developers.cloudflare.com/fundamentals/api/get-started/keys/#view-your-global-api-key)). * Your user account must have API Access enabled. Refer to [control API Access](https://4f1c5cd2.previews.developers.cloudflare.com/fundamentals/api/how-to/control-api-access/) for more information. * You must use the dashboard to manage versioning. Was this helpful? YesNo ## On this page [![](https://4f1c5cd2.previews.developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://4f1c5cd2.previews.developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"WebPage","@id":"https://developers.cloudflare.com/version-management/#page","headline":"Overview · Cloudflare Version Management docs","description":"Test, deploy, and roll back zone configuration changes safely.","url":"https://developers.cloudflare.com/version-management/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-08-25","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ```