Skip to content

Commit 15951fd

Browse files
committed
Reword based on feedback
1 parent 5401424 commit 15951fd

File tree

1 file changed

+1
-2
lines changed
  • src/content/docs/cloudflare-one/policies/gateway/egress-policies

1 file changed

+1
-2
lines changed

src/content/docs/cloudflare-one/policies/gateway/egress-policies/index.mdx

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -189,9 +189,8 @@ The [Application](#application), [Content Categories](#content-categories), [Dom
189189
| [Browser Isolation](/cloudflare-one/policies/browser-isolation/) ||
190190
| [WARP Connector](/cloudflare-one/connections/connect-networks/private-net/warp-connector/) ||
191191
| [Magic WAN](/magic-wan/zero-trust/cloudflare-gateway/) ||
192-
| [WARP-to-WARP](/cloudflare-one/connections/connect-networks/private-net/warp-to-warp/) ||
193192

194-
Gateway will not apply egress policies with these selectors to DNS queries sent outside of the supported on-ramps. Unsupported traffic will be resolved with your default settings. Gateway will only overwrite the DNS response when the query matches a condition in the egress policy. If you use [DNS locations](/cloudflare-one/connections/connect-devices/agentless/dns/locations/) to send a DNS query to Gateway with IPv4, IPv6, DoT, or DoH, Gateway will not return the initial resolved IP. Initial resolved IPs are only returned for queries sent through WARP.
193+
When you use these selectors in an egress policy for traffic from a supported on-ramp, Gateway will assign initial resolved IPs to the DNS queries, then apply the correct egress IP according to the egress policy. Unsupported traffic will be resolved with your default Gateway settings. Gateway will only overwrite the DNS response when the query matches a condition in the egress policy. If you use [DNS locations](/cloudflare-one/connections/connect-devices/agentless/dns/locations/) to send a DNS query to Gateway with IPv4, IPv6, DoT, or DoH, Gateway will not return the initial resolved IP.
195194

196195
To turn on the selectors for your account, use the [Patch Zero Trust account configuration](/api/resources/zero_trust/subresources/gateway/subresources/configurations/methods/edit/) endpoint. For example:
197196

0 commit comments

Comments
 (0)