Skip to content

Commit cce4170

Browse files
committed
Add selector limitations partial
1 parent 5aa13be commit cce4170

File tree

2 files changed

+16
-3
lines changed

2 files changed

+16
-3
lines changed

src/content/docs/cloudflare-one/policies/gateway/egress-policies/index.mdx

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -62,13 +62,17 @@ Gateway matches egress traffic against the following selectors, or criteria:
6262
params={{ policyType: "egress" }}
6363
/>
6464

65+
<Render file="gateway/selectors/egress-selector-limitation" />
66+
6567
### Content Categories
6668

6769
<Render
6870
file="gateway/selectors/net-http-content-categories"
6971
params={{ APIendpoint: "net.fqdn.category" }}
7072
/>
7173

74+
<Render file="gateway/selectors/egress-selector-limitation" />
75+
7276
### Destination Continent
7377

7478
<Render
@@ -99,10 +103,14 @@ Gateway matches egress traffic against the following selectors, or criteria:
99103

100104
<Render file="gateway/selectors/domain" />
101105

106+
<Render file="gateway/selectors/egress-selector-limitation" />
107+
102108
### Host
103109

104110
<Render file="gateway/selectors/host" />
105111

112+
<Render file="gateway/selectors/egress-selector-limitation" />
113+
106114
### Protocol
107115

108116
<Render file="gateway/selectors/protocol" />
@@ -166,9 +174,9 @@ Gateway uses Rust to evaluate regular expressions. The Rust implementation is sl
166174

167175
The [Application](#application), [Content Categories](#content-categories), [Domain](#domain), and [Host](#host) selectors are only available for traffic onboarded to Gateway with [WARP](/cloudflare-one/connections/connect-devices/warp/), [PAC files](/cloudflare-one/connections/connect-devices/agentless/pac-files/), or [Browser Isolation](/cloudflare-one/policies/browser-isolation/). To use these selectors to filter traffic onboarded with WARP, you need to:
168176

169-
1. [Add a Split Tunnel route](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/#add-a-route) to the IP address `100.60.0.0/12`.
170-
2. Ensure you do not have a Split Tunnel route to `100.60.0.0/10`.
171-
3. Add the following key-value pair to your devices' [WARP configuration file](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/) (`mdm.xml` on Windows and Linux or `com.cloudflare.warp.plist` on macOS):
177+
1. [Add a Split Tunnel route](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/#add-a-route) to exclude the IP address `100.60.0.0/12`.
178+
2. Ensure you do not have a Split Tunnel route to exclude `100.60.0.0/10`.
179+
3. Add and deploy the following key-value pair to your devices' [WARP configuration file](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/) (`mdm.xml` on Windows and Linux or `com.cloudflare.warp.plist` on macOS):
172180
```xml
173181
<key>doh_in_tunnel</key>
174182
<true/>
Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
{}
3+
---
4+
5+
This selector is only available for traffic onboarded to Gateway with WARP, PAC files, or Browser Isolation. For more information, refer to [Limitations](#limitations).

0 commit comments

Comments
 (0)