You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Gateway** > **Resolver policies**.
77
79
2. Select **Add a policy** and enter a name and description.
78
80
3. Create an expression for the traffic you wish to route. For guidance about selectors, operators, and values, refer to [Gateway](/cloudflare-one/policies/gateway/resolver-policies/#selectors).
79
81
4. Select **Use DNS view**. In the dropdown, choose the view that queries matching the expression should be sent to.
80
82
5. (Optional) Adjust the option to **fallback through public DNS** according to your use case.
83
+
- Off: Gateway DNS resolver returns the response as-is to the client.
84
+
- On: In case the response from the internal zone is REFUSED, NXDOMAIN, or a response with a CNAME type, Gateway DNS resolver sends the query to Cloudflare 1.1.1.1 public resolver and tries to resolve the query via public DNS.
81
85
6. Select **Create policy** to confirm.
82
86
83
87
</TabItem> <TabItemlabel="API">
84
88
85
89
Use the API endpoints under [Zero Trust > Gateway > Rules](/api/resources/zero_trust/subresources/gateway/subresources/rules/) to set up resolver policies. Use the rule settings object to define `resolve_dns_internally`, specifying `view_id` and `fallback` option.
86
90
91
+
-`"fallback": "none"`: Gateway DNS resolver returns the response as-is to the client.
92
+
-`"fallback": "public_dns"`: In case the response from the internal zone is REFUSED, NXDOMAIN, or a response with a CNAME type, Gateway DNS resolver sends the query to Cloudflare 1.1.1.1 public resolver and tries to resolve the query via public DNS.
93
+
87
94
For guidance about selectors, operators, and values, refer to [Gateway](/cloudflare-one/policies/gateway/resolver-policies/#selectors).
88
95
89
96
</TabItem> </Tabs>
90
97
98
+
---
99
+
100
+
## Connectivity
101
+
91
102
The internal DNS queries can be sent using different configurations:
92
103
93
104
- Via [WARP](/cloudflare-one/connections/connect-devices/warp/).
0 commit comments