Skip to content

Commit e49b5eb

Browse files
authored
[Gateway] Remove evaluation phase from selectors (#25915)
1 parent 69dcdf9 commit e49b5eb

File tree

18 files changed

+239
-29
lines changed

18 files changed

+239
-29
lines changed

src/content/docs/cloudflare-one/policies/gateway/dns-policies/index.mdx

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -288,7 +288,7 @@ Gateway matches DNS queries against the following selectors, or criteria:
288288
### Application
289289

290290
<Render
291-
file="gateway/selectors/application"
291+
file="gateway/selectors/application-dns"
292292
product="cloudflare-one"
293293
params={{ policyType: "DNS" }}
294294
/>
@@ -358,15 +358,15 @@ Use this selector to filter DNS responses by their `TXT` records.
358358
### Domain
359359

360360
<Render
361-
file="gateway/selectors/domain"
361+
file="gateway/selectors/domain-dns"
362362
product="cloudflare-one"
363363
params={{ APIendpoint: "dns.domains" }}
364364
/>
365365

366366
### Host
367367

368368
<Render
369-
file="gateway/selectors/host"
369+
file="gateway/selectors/host-dns"
370370
product="cloudflare-one"
371371
params={{ APIendpoint: "dns.fqdn" }}
372372
/>
@@ -440,19 +440,19 @@ Use this selector to match a dynamic list of [category IDs](/cloudflare-one/poli
440440

441441
### Source Continent
442442

443-
Use this selector to filter based on the continent where the query arrived to Gateway from. <Render file="gateway/selectors/source-continent" product="cloudflare-one" params={{ one: "dns.src" }} />
443+
Use this selector to filter based on the continent where the query arrived to Gateway from. <Render file="gateway/selectors/source-continent-dns" product="cloudflare-one" params={{ one: "dns.src" }} />
444444

445445
### Source Country
446446

447-
Use this selector to filter based on the country where the query arrived to Gateway from. <Render file="gateway/selectors/source-country" product="cloudflare-one" params={{ one: "dns.src" }} />
447+
Use this selector to filter based on the country where the query arrived to Gateway from. <Render file="gateway/selectors/source-country-dns" product="cloudflare-one" params={{ one: "dns.src" }} />
448448

449449
### Source IP
450450

451-
<Render file="gateway/selectors/source-ip-dns" product="cloudflare-one" />
451+
<Render file="gateway/selectors/source-ip-resolver" product="cloudflare-one" />
452452

453453
### Users
454454

455-
<Render file="gateway/selectors/users" product="cloudflare-one" />
455+
<Render file="gateway/selectors/users-dns" product="cloudflare-one" />
456456

457457
## Comparison operators
458458

src/content/docs/cloudflare-one/policies/gateway/egress-policies/index.mdx

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,7 @@ Gateway matches egress traffic against the following selectors, or criteria:
6969
### Application <Badge text="Beta" variant="caution"/>
7070

7171
<Render
72-
file="gateway/selectors/application"
72+
file="gateway/selectors/application-http"
7373
product="cloudflare-one"
7474
params={{ policyType: "egress" }}
7575
/>
@@ -127,7 +127,7 @@ Gateway matches egress traffic against the following selectors, or criteria:
127127
### Domain <Badge text="Beta" variant="caution"/>
128128

129129
<Render
130-
file="gateway/selectors/domain"
130+
file="gateway/selectors/domain-http"
131131
product="cloudflare-one"
132132
params={{ APIendpoint: "net.fqdn.domains" }}
133133
/>
@@ -140,7 +140,7 @@ Gateway matches egress traffic against the following selectors, or criteria:
140140
### Host <Badge text="Beta" variant="caution"/>
141141

142142
<Render
143-
file="gateway/selectors/host"
143+
file="gateway/selectors/host-http"
144144
product="cloudflare-one"
145145
params={{ APIendpoint: "net.fqdn.host" }}
146146
/>
@@ -160,11 +160,11 @@ Gateway matches egress traffic against the following selectors, or criteria:
160160

161161
### Source Continent
162162

163-
The continent of the user making the request. <Render file="gateway/selectors/source-continent" product="cloudflare-one" params={{ one: "net.src" }} />
163+
The continent of the user making the request. <Render file="gateway/selectors/source-continent-http" product="cloudflare-one" params={{ one: "net.src" }} />
164164

165165
### Source Country
166166

167-
The country of the user making the request. <Render file="gateway/selectors/source-country" product="cloudflare-one" params={{ one: "net.src" }} />
167+
The country of the user making the request. <Render file="gateway/selectors/source-country-http" product="cloudflare-one" params={{ one: "net.src" }} />
168168

169169
### Source Internal IP
170170

@@ -188,7 +188,7 @@ The country of the user making the request. <Render file="gateway/selectors/sour
188188

189189
### Users
190190

191-
<Render file="gateway/selectors/users" product="cloudflare-one" />
191+
<Render file="gateway/selectors/users-http" product="cloudflare-one" />
192192

193193
### Virtual Network
194194

src/content/docs/cloudflare-one/policies/gateway/http-policies/index.mdx

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -411,7 +411,7 @@ The review approval status of an application from [Shadow IT Discovery](/cloudfl
411411
### Application
412412

413413
<Render
414-
file="gateway/selectors/application"
414+
file="gateway/selectors/application-http"
415415
product="cloudflare-one"
416416
params={{ policyType: "HTTP" }}
417417
/>
@@ -495,7 +495,7 @@ Only applies to traffic sent through the [WARP client](/cloudflare-one/connectio
495495
### Domain
496496

497497
<Render
498-
file="gateway/selectors/domain"
498+
file="gateway/selectors/domain-http"
499499
product="cloudflare-one"
500500
params={{ APIendpoint: "http.conn.domains" }}
501501
/>
@@ -622,7 +622,7 @@ Use [Cloudflare Data Loss Prevention (DLP)](/cloudflare-one/policies/data-loss-p
622622
### Host
623623

624624
<Render
625-
file="gateway/selectors/host"
625+
file="gateway/selectors/host-http"
626626
product="cloudflare-one"
627627
params={{ APIendpoint: "http.conn.hostname" }}
628628
/>
@@ -657,11 +657,11 @@ The HTTP response status code received by the traffic.
657657

658658
### Source Continent
659659

660-
The continent of the user making the request. <Render file="gateway/selectors/source-continent" product="cloudflare-one" params={{ one: "http.src_ip" }} />
660+
The continent of the user making the request. <Render file="gateway/selectors/source-continent-http" product="cloudflare-one" params={{ one: "http.src_ip" }} />
661661

662662
### Source Country
663663

664-
The country of the user making the request. <Render file="gateway/selectors/source-country" product="cloudflare-one" params={{ one: "http.src_ip" }} />
664+
The country of the user making the request. <Render file="gateway/selectors/source-country-http" product="cloudflare-one" params={{ one: "http.src_ip" }} />
665665

666666
### Source Internal IP
667667

@@ -713,7 +713,7 @@ The query of a webpage's URL.
713713

714714
### Users
715715

716-
<Render file="gateway/selectors/users" product="cloudflare-one" />
716+
<Render file="gateway/selectors/users-http" product="cloudflare-one" />
717717

718718
### Virtual Network
719719

src/content/docs/cloudflare-one/policies/gateway/network-policies/index.mdx

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -260,7 +260,7 @@ Gateway matches network traffic against the following selectors, or criteria.
260260
### Application
261261

262262
<Render
263-
file="gateway/selectors/application"
263+
file="gateway/selectors/application-http"
264264
product="cloudflare-one"
265265
params={{ policyType: "network" }}
266266
/>
@@ -355,11 +355,11 @@ By default, this selector only applies to HTTPS traffic on port `443`. To inspec
355355

356356
### Source Continent
357357

358-
The continent of the user making the request. <Render file="gateway/selectors/source-continent" product="cloudflare-one" params={{ one: "net.src" }} />
358+
The continent of the user making the request. <Render file="gateway/selectors/source-continent-http" product="cloudflare-one" params={{ one: "net.src" }} />
359359

360360
### Source Country
361361

362-
The country of the user making the request. <Render file="gateway/selectors/source-country" product="cloudflare-one" params={{ one: "net.src" }} />
362+
The country of the user making the request. <Render file="gateway/selectors/source-country-http" product="cloudflare-one" params={{ one: "net.src" }} />
363363

364364
### Source Internal IP
365365

@@ -383,7 +383,7 @@ The country of the user making the request. <Render file="gateway/selectors/sour
383383

384384
### Users
385385

386-
<Render file="gateway/selectors/users" product="cloudflare-one" />
386+
<Render file="gateway/selectors/users-http" product="cloudflare-one" />
387387

388388
### Virtual Network
389389

src/content/docs/cloudflare-one/policies/gateway/resolver-policies.mdx

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -111,15 +111,15 @@ For more information on creating a DNS policy, refer to [DNS policies](/cloudfla
111111
### Domain
112112

113113
<Render
114-
file="gateway/selectors/domain"
114+
file="gateway/selectors/domain-dns"
115115
product="cloudflare-one"
116116
params={{ APIendpoint: "dns.domains" }}
117117
/>
118118

119119
### Host
120120

121121
<Render
122-
file="gateway/selectors/host"
122+
file="gateway/selectors/host-dns"
123123
product="cloudflare-one"
124124
params={{ APIendpoint: "dns.fqdn" }}
125125
/>
@@ -138,19 +138,19 @@ For more information on creating a DNS policy, refer to [DNS policies](/cloudfla
138138

139139
### Source Continent
140140

141-
Use this selector to filter based on the continent where the query arrived to Gateway from. <Render product="cloudflare-one" file="gateway/selectors/source-continent" params={{ one: "dns.src" }} />
141+
Use this selector to filter based on the continent where the query arrived to Gateway from. <Render product="cloudflare-one" file="gateway/selectors/source-continent-dns" params={{ one: "dns.src" }} />
142142

143143
### Source Country
144144

145-
Use this selector to filter based on the country where the query arrived to Gateway from. <Render product="cloudflare-one" file="gateway/selectors/source-country" params={{ one: "dns.src" }} />
145+
Use this selector to filter based on the country where the query arrived to Gateway from. <Render product="cloudflare-one" file="gateway/selectors/source-country-dns" params={{ one: "dns.src" }} />
146146

147147
### Source IP
148148

149-
<Render file="gateway/selectors/source-ip-dns" product="cloudflare-one" />
149+
<Render file="gateway/selectors/source-ip-resolver" product="cloudflare-one" />
150150

151151
### Users
152152

153-
<Render file="gateway/selectors/users" product="cloudflare-one" />
153+
<Render file="gateway/selectors/users-dns" product="cloudflare-one" />
154154

155155
## Comparison operators
156156

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
---
2+
params:
3+
- policyType
4+
---
5+
6+
You can apply {props.policyType} policies to a growing list of popular web applications. Refer to [Application and app types](/cloudflare-one/policies/gateway/application-app-types/) for more information.
7+
8+
| UI name | API example | Evaluation phase |
9+
| ----------- | -------------------------- | --------------------- |
10+
| Application | `any(app.ids[*] in {505})` | Before DNS resolution |
Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
---
2+
params:
3+
- policyType
4+
---
5+
6+
You can apply {props.policyType} policies to a growing list of popular web applications. Refer to [Application and app types](/cloudflare-one/policies/gateway/application-app-types/) for more information.
7+
8+
| UI name | API example |
9+
| ----------- | -------------------------- |
10+
| Application | `any(app.ids[*] in {505})` |
Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
params:
3+
- APIendpoint
4+
---
5+
6+
import { Render } from "~/components";
7+
8+
Use this selector to match against a domain and all subdomains. For example, you can match `example.com` and its subdomains, such as `www.example.com`.
9+
10+
| UI name | API example | Evaluation phase |
11+
| ------- | --------------------------------------------------------- | --------------------- |
12+
| Domain | <code>any({props.APIendpoint}[*] == "example.com")</code> | Before DNS resolution |
13+
14+
<Render
15+
file="gateway/selectors/non-latin-characters"
16+
product="cloudflare-one"
17+
params={{ inputType: "domain" }}
18+
/>
Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
params:
3+
- APIendpoint
4+
---
5+
6+
import { Render } from "~/components";
7+
8+
Use this selector to match against a domain and all subdomains. For example, you can match `example.com` and its subdomains, such as `www.example.com`.
9+
10+
| UI name | API example |
11+
| ------- | --------------------------------------------------------- |
12+
| Domain | <code>any({props.APIendpoint}[*] == "example.com")</code> |
13+
14+
<Render
15+
file="gateway/selectors/non-latin-characters"
16+
product="cloudflare-one"
17+
params={{ inputType: "domain" }}
18+
/>
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
---
2+
params:
3+
- APIendpoint
4+
---
5+
6+
import { Render } from "~/components";
7+
8+
Use this selector to match against only the hostname specified. For example, you can match `test.example.com` but not `example.com` or `www.test.example.com`.
9+
10+
| UI name | API example | Evaluation phase |
11+
| ------- | --------------------------------------------------- | --------------------- |
12+
| Host | <code>{props.APIendpoint} == \"example.com\"</code> | Before DNS resolution |
13+
14+
<Render
15+
file="gateway/selectors/non-latin-characters"
16+
product="cloudflare-one"
17+
params={{ inputType: "hostname" }}
18+
/>
19+
20+
:::note
21+
Some hostnames (`example.com`) will invisibly redirect to the www subdomain (`www.example.com`). To match this type of website, use the [Domain](#domain) selector instead of the Host selector.
22+
:::

0 commit comments

Comments
 (0)