Cloudflare opens hash_in_range() to all plans for HTTP products

In a Rules changelog entry dated October 2, 2026, Cloudflare said hash_in_range() was globally available for HTTP products on every plan. The function hashes fields into an integer within a specified range, giving rules a way to match a portion of requests.

One use is controlling rollouts hostname by hostname. For Cloudflare for SaaS, the company describes setting a custom metadata key called rollout_pct on each hostname, with an integer value from 0 to 100. Its example uses that value as the percentage of requests to select—approximately, rather than as an exact count.

The example also handles a missing setting: coalesce() supplies a fallback of zero when rollout_pct is absent, so the rule matches no requests for that hostname.

For a simpler random sample, Cloudflare shows the expression below. Using cf.random_seed, it selects approximately one request in ten, according to the documentation.

text
hash_in_range(0, 100, cf.random_seed) < 10