From a6ed729ee0997f700b35726816b0d7feaae536be Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Wed, 2 Oct 2024 14:21:10 -0500 Subject: [PATCH 01/13] Rename page --- public/_redirects | 1 + ...uled-dns-policies.mdx => timed-dns-policies.mdx} | 13 +++++++------ 2 files changed, 8 insertions(+), 6 deletions(-) rename src/content/docs/cloudflare-one/policies/gateway/dns-policies/{scheduled-dns-policies.mdx => timed-dns-policies.mdx} (94%) diff --git a/public/_redirects b/public/_redirects index 7d3e2318f46240..b58be596862def 100644 --- a/public/_redirects +++ b/public/_redirects @@ -1643,6 +1643,7 @@ /cloudflare-one/identity/users/short-lived-certificates/ /cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/ 301 /cloudflare-one/identity/users/validating-json/ /cloudflare-one/identity/authorization-cookie/validating-json/ 301 /cloudflare-one/policies/lists/ /cloudflare-one/policies/gateway/lists 301 +/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies/ /cloudflare-one/policies/gateway/timed-dns-policies/#scheduled-policies 301 /cloudflare-one/policies/zero-trust/ /cloudflare-one/policies/access/ 301 /cloudflare-one/policies/zero-trust/app-paths/ /cloudflare-one/policies/access/app-paths/ 301 /cloudflare-one/policies/zero-trust/common-configs/ /cloudflare-one/policies/access/ 301 diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-dns-policies.mdx similarity index 94% rename from src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx rename to src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-dns-policies.mdx index e493745f42c3db..09e3bdcf8c89ed 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-dns-policies.mdx @@ -1,22 +1,23 @@ --- pcx_content_type: reference -title: Scheduled DNS policies +title: Timed DNS policies sidebar: order: 3 - --- Cloudflare Gateway allows you to configure any DNS policy to activate or deactivate on a regular time interval. +## Scheduled policies + By default, Gateway policies are unscheduled and apply at all times. You can use the [Gateway Rules API](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) to create a new DNS policy with a schedule or add a schedule to an existing policy. To schedule a policy, send a [`POST`](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) or [`PUT`](/api/operations/zero-trust-gateway-rules-update-zero-trust-gateway-rule) request with the `schedule` parameter set to your desired days of the week, times of day, and an optional time zone. The schedule will appear in Zero Trust under **Gateway** > **Firewall Policies** > **DNS** when you expand the row for the policy. -## How Gateway determines time zone +### How Gateway determines time zone If you [assign a time zone](#example-fixed-time-zone) to your schedule, Gateway will always use the current time at that time zone regardless of the user's location. This allows you to enable a policy during a certain fixed time period. If you [do not specify a time zone](#example-users-time-zone), Gateway will enable the DNS policy based on the user's local time zone. The user's time zone is inferred from the IP geolocation of their source IP address. If Gateway is unable to determine the time zone from the source IP, we will fall back to the time zone of the data center where the query was received. -### Example: Fixed time zone +#### Example: Fixed time zone The following command creates a DNS policy to block `facebook.com` only on weekdays from 8:00 AM - 12:30 PM and 1:30 PM - 5:00 PM in the Chicago, USA time zone. @@ -43,7 +44,7 @@ curl "https://api.cloudflare.com/client/v4/accounts/{account_id}/gateway/rules" Refer to [this table](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List) for a list of all time zones. -### Example: User's time zone +#### Example: User's time zone The following command creates a DNS policy to block `clockin.com` only on weekends, in the time zone where the user is currently located. @@ -66,5 +67,5 @@ curl "https://api.cloudflare.com/client/v4/accounts/{account_id}/gateway/rules" :::note -Gateway will not change the policy's `enabled` status when inside or outside of the time period specified. When enabled, Gateway activates or deactivates the policy according to its schedule. When disabled, the policy is always deactivated. +Gateway will not change the policy's `enabled` status when inside or outside of the time period specified. When enabled, Gateway activates or deactivates the policy according to its schedule. When disabled, the policy is always deactivated. ::: From 71530de0b4da1f174742b6e486316b3a30424b3d Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Wed, 2 Oct 2024 15:14:18 -0500 Subject: [PATCH 02/13] Add duration section --- .../dns-policies/timed-dns-policies.mdx | 18 ++++++++++++++++-- 1 file changed, 16 insertions(+), 2 deletions(-) diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-dns-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-dns-policies.mdx index 09e3bdcf8c89ed..92b8b462d29f38 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-dns-policies.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-dns-policies.mdx @@ -5,11 +5,25 @@ sidebar: order: 3 --- -Cloudflare Gateway allows you to configure any DNS policy to activate or deactivate on a regular time interval. +By default, Cloudflare Gateway policies apply at all times when turned on. Gateway allows you to configure any DNS policy to activate for a specific amount of time or on a regular time interval. + +## Time-based policy duration + +You can use a time-based policy duration to set a specific time frame for the policy to be active or configure a specific time for the policy to expire. With _Duration_, you can set a policy to turn on for a specific amount of time. With _Exact end time_, you can define a specific time for the policy to expire. + +To set a duration for a DNS policy: + +1. In [Zero Trust](https://one.dash.cloudflare.com), go to **Gateway** > **Firewall policies** > **DNS**. +2. Create a new DNS policy or choose an existing policy and select **Edit**. +3. In **Configure policy settings**, turn on **Set a policy duration**. +4. Choose _Duration_ and enter a specific amount of time or choose _Exact end time_ and enter a specific date and time to end. +5. Select **Save policy**. + +When a policy expires, it will remain inactive until turned back on. You can reset the policy duration, which will turn the policy back on for the set time duration. ## Scheduled policies -By default, Gateway policies are unscheduled and apply at all times. You can use the [Gateway Rules API](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) to create a new DNS policy with a schedule or add a schedule to an existing policy. To schedule a policy, send a [`POST`](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) or [`PUT`](/api/operations/zero-trust-gateway-rules-update-zero-trust-gateway-rule) request with the `schedule` parameter set to your desired days of the week, times of day, and an optional time zone. The schedule will appear in Zero Trust under **Gateway** > **Firewall Policies** > **DNS** when you expand the row for the policy. +You can use the [Gateway Rules API](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) to create a new DNS policy with a schedule or add a schedule to an existing policy. To schedule a policy, send a [`POST`](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) or [`PUT`](/api/operations/zero-trust-gateway-rules-update-zero-trust-gateway-rule) request with the `schedule` parameter set to your desired days of the week, times of day, and an optional time zone. The schedule will appear in Zero Trust under **Gateway** > **Firewall policies** > **DNS** when you expand the row for the policy. ### How Gateway determines time zone From 2c130824e0d0c9965143d9aa89f63cc008ab8760 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Wed, 2 Oct 2024 15:14:39 -0500 Subject: [PATCH 03/13] Simplify filename --- public/_redirects | 2 +- .../dns-policies/{timed-dns-policies.mdx => timed-policies.mdx} | 0 2 files changed, 1 insertion(+), 1 deletion(-) rename src/content/docs/cloudflare-one/policies/gateway/dns-policies/{timed-dns-policies.mdx => timed-policies.mdx} (100%) diff --git a/public/_redirects b/public/_redirects index b58be596862def..3fd4d05fdb4497 100644 --- a/public/_redirects +++ b/public/_redirects @@ -1643,7 +1643,7 @@ /cloudflare-one/identity/users/short-lived-certificates/ /cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/ 301 /cloudflare-one/identity/users/validating-json/ /cloudflare-one/identity/authorization-cookie/validating-json/ 301 /cloudflare-one/policies/lists/ /cloudflare-one/policies/gateway/lists 301 -/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies/ /cloudflare-one/policies/gateway/timed-dns-policies/#scheduled-policies 301 +/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies/ /cloudflare-one/policies/gateway/timed-policies/#scheduled-policies 301 /cloudflare-one/policies/zero-trust/ /cloudflare-one/policies/access/ 301 /cloudflare-one/policies/zero-trust/app-paths/ /cloudflare-one/policies/access/app-paths/ 301 /cloudflare-one/policies/zero-trust/common-configs/ /cloudflare-one/policies/access/ 301 diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-dns-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx similarity index 100% rename from src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-dns-policies.mdx rename to src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx From fca91efaa481360d9243283ddba4ec525fe41c30 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Wed, 2 Oct 2024 15:39:21 -0500 Subject: [PATCH 04/13] Expand description --- .../policies/gateway/dns-policies/timed-policies.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx index 92b8b462d29f38..735ff0beaf63d6 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx @@ -5,7 +5,7 @@ sidebar: order: 3 --- -By default, Cloudflare Gateway policies apply at all times when turned on. Gateway allows you to configure any DNS policy to activate for a specific amount of time or on a regular time interval. +By default, Cloudflare Gateway policies apply at all times when turned on. Gateway allows you to configure any DNS policy to activate for a specific amount of time, until an end time, or on a regular time interval. ## Time-based policy duration From 07e4f2d82be8469a0fdf9347ff4963e8d97a0f48 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Tue, 8 Oct 2024 16:58:48 -0500 Subject: [PATCH 05/13] Add time duration example --- .../policies/gateway/dns-policies/timed-policies.mdx | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx index 735ff0beaf63d6..1d2afb9f7004d7 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx @@ -9,17 +9,19 @@ By default, Cloudflare Gateway policies apply at all times when turned on. Gatew ## Time-based policy duration -You can use a time-based policy duration to set a specific time frame for the policy to be active or configure a specific time for the policy to expire. With _Duration_, you can set a policy to turn on for a specific amount of time. With _Exact end time_, you can define a specific time for the policy to expire. +You can use a time-based policy duration to set a specific time frame for the policy to be active or configure a specific time for the policy to expire. To set a duration for a DNS policy: 1. In [Zero Trust](https://one.dash.cloudflare.com), go to **Gateway** > **Firewall policies** > **DNS**. 2. Create a new DNS policy or choose an existing policy and select **Edit**. 3. In **Configure policy settings**, turn on **Set a policy duration**. -4. Choose _Duration_ and enter a specific amount of time or choose _Exact end time_ and enter a specific date and time to end. +4. Choose _Duration_ and enter a specific amount of time until the policy expires or choose _Exact end time_ and enter a specific date and time for the policy to expire. 5. Select **Save policy**. -When a policy expires, it will remain inactive until turned back on. You can reset the policy duration, which will turn the policy back on for the set time duration. +When a policy expires, it will remain inactive until you turn it back on. You can reset the policy duration, which will turn the policy back on for the set time duration. To reset a policy's duration, select the policy and choose **Reset policy duration**. + +Policies with a set duration will retain their duration through activation. For example, you can create a policy at 12:00 PM and set it to expire after six hours. If you turn the policy off at 3:00 PM and turn it back on 4:00 PM, the policy will still expire at 6:00 PM, six hours after the original time. ## Scheduled policies From 4d55d017c7f33f5518f89a1f37806a542fe1da76 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Tue, 8 Oct 2024 17:11:29 -0500 Subject: [PATCH 06/13] Add time zone info --- .../policies/gateway/dns-policies/timed-policies.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx index 1d2afb9f7004d7..a80223f85358e8 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx @@ -16,7 +16,7 @@ To set a duration for a DNS policy: 1. In [Zero Trust](https://one.dash.cloudflare.com), go to **Gateway** > **Firewall policies** > **DNS**. 2. Create a new DNS policy or choose an existing policy and select **Edit**. 3. In **Configure policy settings**, turn on **Set a policy duration**. -4. Choose _Duration_ and enter a specific amount of time until the policy expires or choose _Exact end time_ and enter a specific date and time for the policy to expire. +4. Choose _Duration_ and enter a specific amount of time until the policy expires or choose _Exact end time_ and enter a specific date and time in your account's time zone for the policy to expire. 5. Select **Save policy**. When a policy expires, it will remain inactive until you turn it back on. You can reset the policy duration, which will turn the policy back on for the set time duration. To reset a policy's duration, select the policy and choose **Reset policy duration**. From 6940e09973efcdd95c323d9553d727eeea5950e9 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Thu, 10 Oct 2024 09:04:06 -0500 Subject: [PATCH 07/13] Add missing file --- .../policies/gateway/dns-policies/scheduled-dns-policies.mdx | 1 + 1 file changed, 1 insertion(+) create mode 100644 src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx new file mode 100644 index 00000000000000..9daeafb9864cf4 --- /dev/null +++ b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx @@ -0,0 +1 @@ +test From cd3f0cc4815991cadcf1cf13bb2228f3f5cd2a77 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Thu, 10 Oct 2024 11:34:47 -0400 Subject: [PATCH 08/13] Delete src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx --- .../policies/gateway/dns-policies/scheduled-dns-policies.mdx | 1 - 1 file changed, 1 deletion(-) delete mode 100644 src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx deleted file mode 100644 index 9daeafb9864cf4..00000000000000 --- a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies.mdx +++ /dev/null @@ -1 +0,0 @@ -test From 546c8a6fcb41d21ef0408c1c752014816b3b2a66 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Thu, 10 Oct 2024 11:08:48 -0500 Subject: [PATCH 09/13] Add API endpoint names --- .../policies/gateway/dns-policies/timed-policies.mdx | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx index a80223f85358e8..dc83b245694a67 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx @@ -25,7 +25,7 @@ Policies with a set duration will retain their duration through activation. For ## Scheduled policies -You can use the [Gateway Rules API](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) to create a new DNS policy with a schedule or add a schedule to an existing policy. To schedule a policy, send a [`POST`](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) or [`PUT`](/api/operations/zero-trust-gateway-rules-update-zero-trust-gateway-rule) request with the `schedule` parameter set to your desired days of the week, times of day, and an optional time zone. The schedule will appear in Zero Trust under **Gateway** > **Firewall policies** > **DNS** when you expand the row for the policy. +You can use the Gateway API to create a new DNS policy with a schedule or add a schedule to an existing policy. To schedule a policy, use the [Create a Zero Trust Gateway rule endpoint](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) or [Update a Zero Trust Gateway rule endpoint](/api/operations/zero-trust-gateway-rules-update-zero-trust-gateway-rule) with the `schedule` parameter set to your desired days of the week, times of day, and an optional time zone. The schedule will appear in Zero Trust under **Gateway** > **Firewall policies** > **DNS** when you select the policy. ### How Gateway determines time zone @@ -58,11 +58,11 @@ curl "https://api.cloudflare.com/client/v4/accounts/{account_id}/gateway/rules" }' ``` -Refer to [this table](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List) for a list of all time zones. +Refer to [this table](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List) for a list of all time zone identifiers. #### Example: User's time zone -The following command creates a DNS policy to block `clockin.com` only on weekends, in the time zone where the user is currently located. +The following command creates a DNS policy to block `clockin.com` only on weekends in the time zone where the user is currently located. ```bash curl "https://api.cloudflare.com/client/v4/accounts/{account_id}/gateway/rules" \ @@ -82,6 +82,5 @@ curl "https://api.cloudflare.com/client/v4/accounts/{account_id}/gateway/rules" ``` :::note - Gateway will not change the policy's `enabled` status when inside or outside of the time period specified. When enabled, Gateway activates or deactivates the policy according to its schedule. When disabled, the policy is always deactivated. ::: From 6a62fb32878449701fd0cfcf394fe891cf4e9968 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Thu, 10 Oct 2024 13:42:20 -0500 Subject: [PATCH 10/13] Remove expire language --- .../policies/gateway/dns-policies/timed-policies.mdx | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx index dc83b245694a67..66651fa1bf9dc2 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx @@ -9,19 +9,23 @@ By default, Cloudflare Gateway policies apply at all times when turned on. Gatew ## Time-based policy duration -You can use a time-based policy duration to set a specific time frame for the policy to be active or configure a specific time for the policy to expire. +You can use a time-based policy duration to set a specific time frame for the policy to turn on or configure an exact time for the policy to turn off. To set a duration for a DNS policy: 1. In [Zero Trust](https://one.dash.cloudflare.com), go to **Gateway** > **Firewall policies** > **DNS**. 2. Create a new DNS policy or choose an existing policy and select **Edit**. 3. In **Configure policy settings**, turn on **Set a policy duration**. -4. Choose _Duration_ and enter a specific amount of time until the policy expires or choose _Exact end time_ and enter a specific date and time in your account's time zone for the policy to expire. +4. Choose _Duration_ and enter a specific amount of time until the policy turns off or choose _Exact end time_ and enter a specific date and time in your account's time zone for the policy to turn off. 5. Select **Save policy**. -When a policy expires, it will remain inactive until you turn it back on. You can reset the policy duration, which will turn the policy back on for the set time duration. To reset a policy's duration, select the policy and choose **Reset policy duration**. +When a policy turns off, it will remain off until you turn it back on. -Policies with a set duration will retain their duration through activation. For example, you can create a policy at 12:00 PM and set it to expire after six hours. If you turn the policy off at 3:00 PM and turn it back on 4:00 PM, the policy will still expire at 6:00 PM, six hours after the original time. +### Edit policy duration + +You can reset the policy duration, which will turn the policy back on for the set time duration. To reset a policy's duration, select the policy and choose **Reset policy duration**. + +Policies with a set duration will retain their duration when turned off or on. For example, you can create a policy at 12:00 PM and set it to turn off after six hours. If you turn the policy off at 3:00 PM and turn it back on 4:00 PM, the policy will still turn off at 6:00 PM, six hours after the original time. ## Scheduled policies From a3f159d2dff95b2150c6220b75164ffce2a933f0 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Thu, 10 Oct 2024 14:10:18 -0500 Subject: [PATCH 11/13] Add Reset policy section --- .../gateway/dns-policies/timed-policies.mdx | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx index 66651fa1bf9dc2..b3f80e086d2ace 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx @@ -16,16 +16,24 @@ To set a duration for a DNS policy: 1. In [Zero Trust](https://one.dash.cloudflare.com), go to **Gateway** > **Firewall policies** > **DNS**. 2. Create a new DNS policy or choose an existing policy and select **Edit**. 3. In **Configure policy settings**, turn on **Set a policy duration**. -4. Choose _Duration_ and enter a specific amount of time until the policy turns off or choose _Exact end time_ and enter a specific date and time in your account's time zone for the policy to turn off. +4. In **Input method**, choose _Duration_ and enter a specific amount of time until the policy turns off or choose \_Exact end date and enter a specific date and time in your account's time zone for the policy to turn off. 5. Select **Save policy**. When a policy turns off, it will remain off until you turn it back on. -### Edit policy duration +Policies with a set duration will retain their duration when turned off or on. For example, you can create a policy at 12:00 PM and set it to turn off after six hours. If you turn the policy off at 3:00 PM and turn it back on 4:00 PM, the policy will still turn off at 6:00 PM, six hours after the original time. -You can reset the policy duration, which will turn the policy back on for the set time duration. To reset a policy's duration, select the policy and choose **Reset policy duration**. +### Reset a policy duration -Policies with a set duration will retain their duration when turned off or on. For example, you can create a policy at 12:00 PM and set it to turn off after six hours. If you turn the policy off at 3:00 PM and turn it back on 4:00 PM, the policy will still turn off at 6:00 PM, six hours after the original time. +When a policy's time duration expires, you can turn the policy back on for the duration you originally configured. To reset a policy's duration, select the policy and choose **Reset policy duration**. + +For policies with an exact end time, you can change the time before the policy turns off. Once the policy reaches its exact end time, you will need to edit the policy and set a new end time. To set a new exact end time: + +1. Select the policy. +2. Choose **Edit**. +3. Turn on **Set a policy duration**. +4. In **Input method**, choose _Exact end date_. In **Date and time**, enter a new date and time for the policy to turn off. +5. Select **Save policy**. ## Scheduled policies From f60ab8bfbec63d27e2a692c400437c7c1a0e27a3 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Thu, 10 Oct 2024 15:21:41 -0500 Subject: [PATCH 12/13] Fix italics --- .../policies/gateway/dns-policies/timed-policies.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx index b3f80e086d2ace..df5e4a8c23072c 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/dns-policies/timed-policies.mdx @@ -16,7 +16,7 @@ To set a duration for a DNS policy: 1. In [Zero Trust](https://one.dash.cloudflare.com), go to **Gateway** > **Firewall policies** > **DNS**. 2. Create a new DNS policy or choose an existing policy and select **Edit**. 3. In **Configure policy settings**, turn on **Set a policy duration**. -4. In **Input method**, choose _Duration_ and enter a specific amount of time until the policy turns off or choose \_Exact end date and enter a specific date and time in your account's time zone for the policy to turn off. +4. In **Input method**, choose _Duration_ and enter a specific amount of time until the policy turns off or choose _Exact end date_ and enter a specific date and time in your account's time zone for the policy to turn off. 5. Select **Save policy**. When a policy turns off, it will remain off until you turn it back on. From 5a368e1144d457cbee148d18ea1caab9591ab3de Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Thu, 10 Oct 2024 15:31:54 -0500 Subject: [PATCH 13/13] Add changelog --- src/content/changelogs/gateway.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/content/changelogs/gateway.yaml b/src/content/changelogs/gateway.yaml index 2ef46f85144ca8..e6c483828b4f7a 100644 --- a/src/content/changelogs/gateway.yaml +++ b/src/content/changelogs/gateway.yaml @@ -5,6 +5,10 @@ productLink: "/cloudflare-one/policies/gateway/" productArea: Cloudflare One productAreaLink: /cloudflare-one/changelog/ entries: + - publish_date: "2024-10-10" + title: Time-based policy duration + description: |- + Gateway now offers [time-based DNS policy duration](/cloudflare-one/policies/gateway/dns-policies/timed-policies/#time-based-policy-duration). With policy duration, you can configure a duration of time for a policy to turn on or set an exact date and time to turn a policy off. - publish_date: "2024-10-04" title: Expanded Gateway log fields description: |-