Skip to content

[Gateway] Google Translate proxy common policy #24921

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Sep 8, 2025
Merged

[Gateway] Google Translate proxy common policy #24921

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
02ea8b4
Add Google Translate proxy common policy
maxvp Sep 3, 2025
f053b55
Rename section
maxvp Sep 3, 2025
ecd04ab
Update src/content/docs/cloudflare-one/policies/gateway/http-policies…
maxvp Sep 5, 2025
1b99921
Merge branch 'production' into max/gw/gtranslate-common-policy
maxvp Sep 5, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 34 additions & 0 deletions src/content/docs/cloudflare-one/policies/gateway/http-policies/common-policies.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -467,6 +467,40 @@ Block file downloads from Gmail.

</TabItem> </Tabs>

### Block Google Translate proxy

Block use of Google Translate to translate entire webpages.

When translating a website, Google Translate proxies webpages with the `translate.goog` domain. Your users may be able to use this service to bypass other Gateway policies. If you block `translate.goog`, users will still be able to access other Google Translate features.

<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">

| Selector | Operator | Value | Action |
| -------- | ------------- | -------------------------- | ------ |
| Domain | matches regex | `^(.+\.)?translate\.goog$` | Block |

</TabItem>

<TabItem label="API">

<APIRequest
path="/accounts/{account_id}/gateway/rules"
method="POST"
json={{
name: "Block Google Translate for websites",
description: "Block use of Google Translate to translate entire webpages",
enabled: true,
action: "block",
filters: ["http"],
traffic:
'any(http.request.domains[*] matches "^(.+\\.)?translate\\.goog$")',
identity: "",
device_posture: "",
}}
/>

</TabItem> </Tabs>

## Filter WebSocket traffic

Gateway does not inspect or log [WebSocket](https://datatracker.ietf.org/doc/html/rfc6455) traffic. Instead, Gateway will only log the HTTP details used to make the WebSocket connection, as well as [network session information](/logs/logpush/logpush-job/datasets/account/zero_trust_network_sessions/). To filter your WebSocket traffic, create a policy with the `101` HTTP response code.
Expand Down
Loading