Gateway

Workers using a VPC Network binding with network_id: "cf1:network" now egress to public Internet destinations through Cloudflare Gateway. This means your existing Zero Trust traffic policies — DNS, HTTP, Network, and egress — extend to traffic that originates from your…

Cloudflare Gateway now supports natural language policy creation for DNS, HTTP, and Network firewall policies. Administrators can describe the outcome they want in plain language, and Cloudflare will generate a complete policy rule that populates the policy builder form. To…

The Gateway Authorization Proxy and hosted PAC files are now generally available for all plan types. Authorization proxy endpoints add an identity-aware option alongside the existing source IP proxy endpoints, using Cloudflare Access authentication to verify who a user is…

Zero Trust Network Session Logs are now generated for all traffic proxied through Cloudflare Gateway, regardless of on-ramp type. This includes traffic from proxy endpoints (PAC files) and Browser Isolation egress — on-ramps that previously did not generate session logs.…

The Gateway Authorization Proxy and PAC file hosting are now in open beta for all plan types. Previously, proxy endpoints relied on static source IP addresses to authorize traffic, providing no user-level identity in logs or policies. The new authorization…

Gateway Protocol Detection now supports seven additional protocols in beta: ProtocolNotesIMAPInternet Message Access Protocol — email retrievalPOP3Post Office Protocol v3 — email retrievalSMTPSimple Mail Transfer Protocol — email sendingMYSQLMySQL database wire protocolRSYNC-DAEMONrsync daemon protocolLDAPLightweight Directory Access ProtocolNTPNetwork Time Protocol These…