-
Notifications
You must be signed in to change notification settings - Fork 10.4k
[ZT] New WARP Connector flow #16486
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[ZT] New WARP Connector flow #16486
Conversation
|
| GitGuardian id | GitGuardian status | Secret | Commit | Filename | |
|---|---|---|---|---|---|
| 11021221 | Triggered | Generic High Entropy Secret | bbfe9a8 | astro.config.mjs | View secret |
| 11021221 | Triggered | Generic High Entropy Secret | bbfe9a8 | astro.config.mjs | View secret |
| 11021221 | Triggered | Generic High Entropy Secret | bbfe9a8 | astro.config.mjs | View secret |
| 11021221 | Triggered | Generic High Entropy Secret | 30e5cef | astro.config.mjs | View secret |
🛠 Guidelines to remediate hardcoded secrets
- Understand the implications of revoking this secret by investigating where it is used in your code.
- Replace and store your secrets safely. Learn here the best practices.
- Revoke and rotate these secrets.
- If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.
To avoid such incidents in the future consider
- following these best practices for managing and storing secrets including API keys and other credentials
- install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.
🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.
src/content/docs/cloudflare-one/connections/connect-networks/private-net/warp-connector.mdx
Outdated
Show resolved
Hide resolved
Deploying cloudflare-docs with
|
| Latest commit: |
6d5a0df
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://ff3b2a75.cloudflare-docs-7ou.pages.dev |
| Branch Preview URL: | https://ranbel-warp-connector-2.cloudflare-docs-7ou.pages.dev |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
6 files reviewed, 1 total issue(s) found.
src/content/partials/cloudflare-one/tunnel/install-warp-connector.mdx
Outdated
Show resolved
Hide resolved
|
This PR changes current filenames or deletes current files. Make sure you have redirects set up to cover the following paths:
|
...docs/cloudflare-one/connections/connect-networks/private-net/warp-connector/site-to-site.mdx
Outdated
Show resolved
Hide resolved
src/content/partials/cloudflare-one/tunnel/warp-connector-alternate-gateway.mdx
Outdated
Show resolved
Hide resolved
...docs/cloudflare-one/connections/connect-networks/private-net/warp-connector/user-to-site.mdx
Outdated
Show resolved
Hide resolved
...docs/cloudflare-one/connections/connect-networks/private-net/warp-connector/user-to-site.mdx
Outdated
Show resolved
Hide resolved
src/content/partials/cloudflare-one/tunnel/warp-connector-install.mdx
Outdated
Show resolved
Hide resolved
src/content/partials/cloudflare-one/tunnel/warp-connector-install.mdx
Outdated
Show resolved
Hide resolved
src/content/partials/cloudflare-one/tunnel/warp-connector-install.mdx
Outdated
Show resolved
Hide resolved
src/content/partials/cloudflare-one/tunnel/warp-connector-install.mdx
Outdated
Show resolved
Hide resolved
src/content/partials/cloudflare-one/tunnel/warp-connector-install.mdx
Outdated
Show resolved
Hide resolved
…all.mdx Co-authored-by: Jun Lee <[email protected]>
…all.mdx Co-authored-by: Jun Lee <[email protected]>
…all.mdx Co-authored-by: Jun Lee <[email protected]>
…rivate-net/warp-connector/site-to-site.mdx Co-authored-by: Jun Lee <[email protected]>
…rnate-gateway.mdx Co-authored-by: Jun Lee <[email protected]>
…rivate-net/warp-connector/user-to-site.mdx Co-authored-by: Jun Lee <[email protected]>
…rivate-net/warp-connector/user-to-site.mdx Co-authored-by: Jun Lee <[email protected]>
…all.mdx Co-authored-by: Jun Lee <[email protected]>
…all.mdx Co-authored-by: Jun Lee <[email protected]>
|
|
||
| </Details> | ||
|
|
||
| Cloudflare WARP Connector is a piece of software [^1] that enables site-to-site, bidirectional, and mesh networking connectivity without requiring changes to underlying network routing infrastructure. WARP Connector establishes a secure Layer 3 connection between a private network and Cloudflare, allowing you to: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nit: A "connection" usually implies a persistent, stateful link between two endpoints and is typically managed at the transport layer (Layer 4) over TCP. It's a little odd to see connection and Layer 3 in the same sentence, but let's get more feedback there. I might be overanalyzing.
I'd also update piece of software to be more descriptive. Maybe software client?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@abelinkinbio, does the following make more sense? WARP Connector establishes a secure Layer 3 proxy between a private network and Cloudflare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yea I think switching to software agent and secure Layer 3 proxy makes sense
|
|
||
|  | ||
|
|
||
| As shown in the diagram, WARP Connector acts as a router for a subnet within the private network to on-ramp and off-ramp traffic through Cloudflare. All devices on the subnet can access any services connected to Cloudflare, and all devices connected to Cloudflare can access any services on the subnet. Each subnet runs a WARP Connector on a designated Linux machine (typically the default gateway router), but other devices on the network do not need to install software. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We should link "typical the default gateway router" to the section in our tutorial which shows the two models you could run warp connector in.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
addressed in #17793
PCX-10781
PCX-11533
PCX-13625
Replaces #15454