CloudflareWAF
Cloudflare WAF integration allows customers to manage firewall rules, filters, and IP-lists. It also allows to retrieve zones list for each account.
- Category
- Network Security
- Pack
- CloudflareWAF
Configuration parameters
- server — Server URL (e.g. https://api.cloudflare.com/client/v4/)
- credentials — API Token
- global_api_key — Global API Key
- email — Email
- account_id — Account ID (required)
- zone_id — Default Zone ID
- proxy — Use system proxy settings
- insecure — Trust any certificate (not secure)
Commands (21)
- cloudflare-waf-filter-create — Create a new filter which can be added to a firewall rule.
- cloudflare-waf-filter-delete — Delete an exist filter (Note that a filter linked to firewall rule cannot be deleted).
- cloudflare-waf-filter-list — List filters.
- cloudflare-waf-filter-update — Update filter by the specified filter ID.
- cloudflare-waf-firewall-rule-create — Create a new firewall rule that create new filter or use an exist filter.
- cloudflare-waf-firewall-rule-delete — Delete firewall rule by the specified rule ID.
- cloudflare-waf-firewall-rule-list — List of firewall rules or details of individual rule by ID.
- cloudflare-waf-firewall-rule-update — Update firewall rule by the specified rule ID. Can update rule action, paused, description, priority, products and ref. Can not update or delete rule filter, ONLY add a new filter.
- cloudflare-waf-ip-list-create — Create a new IP-list. An IP-list is a list that includes IP addresses and CIDR. IP-list is used in the filter expression.
- cloudflare-waf-ip-list-delete — Delete IP-list by the specified list ID. Note that IP-list that assigned to a firewall rule can not be delete, only after unassign the list.
- cloudflare-waf-ip-list-item-create — Create new items for exist IP-list.
- cloudflare-waf-ip-list-item-delete — Delete item of a IP-list by the specified list ID and list item.
- cloudflare-waf-ip-list-item-list — List all items in the List or details of individual item by ID or IP. This command may take a long time, you can set the 'execution-timeout' field if necessary.
- cloudflare-waf-ip-list-item-update — Replace the IP-list items with a new items.
- cloudflare-waf-ip-lists-list — List IP-lists.
- cloudflare-waf-ruleset-create — The command creates a new ruleset at the account or zone level.
- cloudflare-waf-ruleset-delete — The command deletes a ruleset by ID.
- cloudflare-waf-ruleset-get — The command retrieves a specific ruleset by ID, including its list of rules.
- cloudflare-waf-ruleset-list — The command lists all rulesets at the account or zone level.
- cloudflare-waf-ruleset-update — The command updates an existing ruleset by ID. Note that this replaces the entire ruleset configuration.
- cloudflare-waf-zone-list — List all account zones.