diff --git a/src/content/docs/cloudflare-one/policies/gateway/http-policies/index.mdx b/src/content/docs/cloudflare-one/policies/gateway/http-policies/index.mdx index 140fc8c50e65920..b5eba9484187e20 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/http-policies/index.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/http-policies/index.mdx @@ -446,11 +446,10 @@ Only applies to traffic sent through the [WARP client](/cloudflare-one/connectio ### Domain -Use this selector to match against a domain and all subdomains -- for example, if you want to block `example.com` and subdomains such as `www.example.com`. - -| UI name | API example | -| ------- | -------------------------------------------- | -| Domain | `any(http.conn.domains[*] == "example.com")` | + ### Download and Upload File Size @@ -549,15 +548,10 @@ Scans HTTP traffic for the presence of social security numbers and other PII. Yo ### Host -Use this selector to match only the hostname specified -- for example, if you want to block `test.example.com` but not `example.com` or `www.test.example.com`. - -| UI name | API example | -| ------- | ------------------------------------------ | -| Host | `http.conn.hostname == "test.example.com"` | - -:::note -Some hostnames (`example.com`) will invisibly redirect to the www subdomain (`www.example.com`). To match this type of website, use the [Domain](#domain) selector instead of the Host selector. -::: + ### HTTP Method diff --git a/src/content/docs/cloudflare-one/policies/gateway/lists.mdx b/src/content/docs/cloudflare-one/policies/gateway/lists.mdx index 6550528bc25a2bc..43f11b68f5b503c 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/lists.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/lists.mdx @@ -47,9 +47,13 @@ Your lists can include up to 1,000 entries for Standard plans and 5,000 for Ente Hostname lists do not support wildcard entries. You will need to add domains as exact matches. Adding a wildcard to lists comprised of hostnames will return an error when you save. +### Non-Latin characters + +Gateway supports non-Latin characters by converting all domains and hostnames to [Punycode](https://www.rfc-editor.org/rfc/rfc3492.txt). Once you save a list with non-Latin characters, Gateway will display the entry as Punycode. + ### Duplicate entries -Lists cannot have duplicate entries. Because hostnames are converted to [Punycode](https://www.rfc-editor.org/rfc/rfc3492.txt), multiple list entries that convert to the same string will count as duplicates. For example, `éxàmple.com` converts to `xn—xmple-rqa5d.com`, so including both `éxàmple.com` and `xn—xmple-rqa5d.com` in a list will result in a duplicate error. +Lists cannot have duplicate entries. Because domains and hostnames are converted to [Punycode](#non-latin-characters), multiple list entries that convert to the same string will count as duplicates. For example, `éxàmple.com` converts to `xn—xmple-rqa5d.com`, so including both `éxàmple.com` and `xn—xmple-rqa5d.com` in a list will result in a duplicate error. ### URL slashes diff --git a/src/content/partials/cloudflare-one/gateway/selectors/domain.mdx b/src/content/partials/cloudflare-one/gateway/selectors/domain.mdx index c85501f76d238fa..e77f437152e517f 100644 --- a/src/content/partials/cloudflare-one/gateway/selectors/domain.mdx +++ b/src/content/partials/cloudflare-one/gateway/selectors/domain.mdx @@ -3,8 +3,15 @@ params: - APIendpoint --- +import { Render } from "~/components"; + Use this selector to match against a domain and all subdomains. For example, you can match `example.com` and its subdomains, such as `www.example.com`. -| UI name | API example | Evaluation phase | -| ------- | ------------------------------------------------- | --------------------- | -| Domain | any({props.APIendpoint}[*] in \{1\}) | Before DNS resolution | +| UI name | API example | Evaluation phase | +| ------- | --------------------------------------------------------- | --------------------- | +| Domain | any({props.APIendpoint}[*] == "example.com") | Before DNS resolution | + + diff --git a/src/content/partials/cloudflare-one/gateway/selectors/host.mdx b/src/content/partials/cloudflare-one/gateway/selectors/host.mdx index ae797bf3d89e340..e929c322a6ae67b 100644 --- a/src/content/partials/cloudflare-one/gateway/selectors/host.mdx +++ b/src/content/partials/cloudflare-one/gateway/selectors/host.mdx @@ -3,8 +3,19 @@ params: - APIendpoint --- +import { Render } from "~/components"; + Use this selector to match against only the hostname specified. For example, you can match `test.example.com` but not `example.com` or `www.test.example.com`. | UI name | API example | Evaluation phase | | ------- | --------------------------------------------------- | --------------------- | | Host | {props.APIendpoint} == \"example.com\" | Before DNS resolution | + + + +:::note +Some hostnames (`example.com`) will invisibly redirect to the www subdomain (`www.example.com`). To match this type of website, use the [Domain](#domain) selector instead of the Host selector. +::: diff --git a/src/content/partials/cloudflare-one/gateway/selectors/non-latin-characters.mdx b/src/content/partials/cloudflare-one/gateway/selectors/non-latin-characters.mdx new file mode 100644 index 000000000000000..22ea19575fe4576 --- /dev/null +++ b/src/content/partials/cloudflare-one/gateway/selectors/non-latin-characters.mdx @@ -0,0 +1,6 @@ +--- +params: + - inputType +--- + +Gateway policies do not support {props.inputType}s with non-Latin characters directly. To use a {props.inputType} with non-Latin characters, add it to a [list](/cloudflare-one/policies/gateway/lists/).