CloudflareWAF

Cloudflare WAF integration allows customers to manage firewall rules, filters, and IP-lists. It also allows to retrieve zones list for each account.

Network Security · Cloudflare WAF

Configuration parameters

  • server — Server URL (e.g. https://api.cloudflare.com/client/v4/)
  • credentials — API Token
  • global_api_key — Global API Key
  • email — Email
  • account_id — Account ID (required)
  • zone_id — Default Zone ID
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)

Commands (21)

  • cloudflare-waf-filter-create

    Create a new filter which can be added to a firewall rule.

  • cloudflare-waf-filter-delete

    Delete an exist filter (Note that a filter linked to firewall rule cannot be deleted).

  • cloudflare-waf-filter-list

    List filters.

  • cloudflare-waf-filter-update

    Update filter by the specified filter ID.

  • cloudflare-waf-firewall-rule-create

    Create a new firewall rule that create new filter or use an exist filter.

  • cloudflare-waf-firewall-rule-delete

    Delete firewall rule by the specified rule ID.

  • cloudflare-waf-firewall-rule-list

    List of firewall rules or details of individual rule by ID.

  • cloudflare-waf-firewall-rule-update

    Update firewall rule by the specified rule ID. Can update rule action, paused, description, priority, products and ref. Can not update or delete rule filter, ONLY add a new filter.

  • cloudflare-waf-ip-list-create

    Create a new IP-list. An IP-list is a list that includes IP addresses and CIDR. IP-list is used in the filter expression.

  • cloudflare-waf-ip-list-delete

    Delete IP-list by the specified list ID. Note that IP-list that assigned to a firewall rule can not be delete, only after unassign the list.

  • cloudflare-waf-ip-list-item-create

    Create new items for exist IP-list.

  • cloudflare-waf-ip-list-item-delete

    Delete item of a IP-list by the specified list ID and list item.

  • cloudflare-waf-ip-list-item-list

    List all items in the List or details of individual item by ID or IP. This command may take a long time, you can set the 'execution-timeout' field if necessary.

  • cloudflare-waf-ip-list-item-update

    Replace the IP-list items with a new items.

  • cloudflare-waf-ip-lists-list

    List IP-lists.

  • cloudflare-waf-ruleset-create

    The command creates a new ruleset at the account or zone level.

  • cloudflare-waf-ruleset-delete

    The command deletes a ruleset by ID.

  • cloudflare-waf-ruleset-get

    The command retrieves a specific ruleset by ID, including its list of rules.

  • cloudflare-waf-ruleset-list

    The command lists all rulesets at the account or zone level.

  • cloudflare-waf-ruleset-update

    The command updates an existing ruleset by ID. Note that this replaces the entire ruleset configuration.

  • cloudflare-waf-zone-list

    List all account zones.