Don’t know about google but in AWS the equivalent rule only looks at the first 8k of the body. There’s a separate rule for the header and another rule to block

Don’t know about google but in AWS the equivalent rule only looks at the first 8k of the body. There’s a separate rule for the header and another rule to block requests with header size exceeding n KB. If you allowed large headers then you could prevent the header rules too, but IIRC by default it doesn’t. Besides most web infrastructure would barf at huge headers…