NAW false positives blocking Next.js RSC (rsc_resolved_model_injection) causing hanging API requests (0 bytes, pending)

Could you clarify what NAW is? My only search result for “blocked by NAW: rsc_resolved_model_injection” was this forum thread :blush:

NAW = Fly.io’s Network Application Firewall (their edge/WAF layer). It can block requests based on security rules/signatures; in this case it’s blocking legitimate Next.js RSC / Server Actions traffic and the client sees the request hang pending with 0 bytes.

Aha, is it this one?

Correct

1 Like