Cloudflare DNS Firewall

cloudflareFirewallcloudflare-dns-firewall

Caching resolver proxy that shields and accelerates your authoritative nameservers.

Provider
cloudflare
Category
Security
Properties · 1 set by this component
propertytypevaluesrequiredkind defaultthis component
attackMitigation · component propertyboolean—nofalseinherited
defaultActionenumallow | denyno—inherited
ecsFallback · component propertyboolean—nofalseinherited
intrusionPreventionboolean—no—inherited
loggingboolean—no—inherited
managedboolean—nofalse▸ true
maximumCacheTtlSeconds · component propertyinteger—no—inherited
minimumCacheTtlSeconds · component propertyinteger—no—inherited
negativeCacheTtlSeconds · component propertyinteger—no—inherited
rateLimitQueriesPerSecond · component propertyinteger—no—inherited
ruleCountinteger—no—inherited
statefulboolean—no—inherited
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "dns-firewall", component: "cloudflare-dns-firewall" }
Other Firewall products · 35
Cloud Firewallalibaba-cloud-firewallalibabacloudfirewallNetwork ACLalibaba-network-aclalibabacloudfirewallECS Security Groupalibaba-security-groupalibabacloudfirewallNetwork ACLaws-network-aclawsfirewallAWS Network Firewallaws-network-firewallawsfirewallAmazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewallSecurity groupaws-security-groupawsfirewallMicrosoft Entra Internet Accessazure-entra-internet-accessazurefirewallAzure Firewallazure-firewallazurefirewallNetwork Security Groupazure-network-security-groupazurefirewallNetwork security perimeterazure-network-security-perimeterazurefirewallCloudflare Gatewaycloudflare-gatewaycloudflarefirewallCloudflare Network Firewallcloudflare-network-firewallcloudflarefirewallGeneric firewallfirewallfirewallFirewall appliancefirewall-appliancefirewallFortinet FortiGatefortigatefirewallMikroTik RouterOSmikrotik-routerosfirewallnftablesnftablesfirewallOPNsenseopnsensefirewallPalo Alto Networks NGFWpalo-alto-ngfwfirewallpfSensepfsensefirewallSnortsnortfirewallSuricatasuricatafirewallVyOSvyosfirewallDigitalOcean Cloud Firewallsdigitalocean-cloud-firewalldigitaloceanfirewallCloud IDSgoogle-cloud-idsgcpfirewallCloud NGFWgoogle-cloud-ngfwgcpfirewallSecure Web Proxygoogle-secure-web-proxygcpfirewallIBM Cloud Hardware Firewallibm-firewallibmfirewallVPC Security Groupibm-security-groupibmfirewallNetworkPolicyk8s-network-policyk8sfirewallNetwork Firewalloci-network-firewallocifirewallNetwork Security Groupoci-network-security-groupocifirewallSecurity Listoci-security-listocifirewallSecurity Groupoutscale-security-groupoutscalefirewall
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Cloudflare DNS Firewall: caching resolver proxy in front of customer authoritative nameservers.
# "DNS Firewall": queries are proxied and cached at the nearest data center; ECS fallback and
# attack mitigation are off unless configured. Enterprise-only paid add-on.
schemaVersion: "1"
type: "component"
id: "cloudflare-dns-firewall"
kind: "firewall"
provider: "cloudflare"
docs: "https://developers.cloudflare.com/dns/dns-firewall/"
defaults:
  managed: true
properties:
  minimumCacheTtlSeconds:
    type: "integer"
  maximumCacheTtlSeconds:
    type: "integer"
  negativeCacheTtlSeconds:
    type: "integer"
  rateLimitQueriesPerSecond:
    type: "integer"
  ecsFallback:
    type: "boolean"
    default: false
  attackMitigation:
    type: "boolean"
    default: false

The same page as markdown, for an agent: /catalogue/components/cloudflare-dns-firewall.md