Cloudflare Network Firewall

cloudflare Firewallcloudflare-network-firewall

Stateless firewall-as-a-service filtering packets for Magic Transit and Cloudflare WAN networks.

Provider: cloudflare
Kind: Firewall
Category: Security
Official docs: https://developers.cloudflare.com/cloudflare-network-firewall/about/ruleset-logic/
Also known as: Magic Firewall

Properties · 3 set by this component

property	type	values	required	kind default	this component
defaultAction	enum	allow \| deny	no	—	▸ allow
intrusionDetection · component property	boolean	—	no	false	inherited
intrusionPrevention	boolean	—	no	—	inherited
logging	boolean	—	no	—	inherited
managed	boolean	—	no	false	▸ true
packetFiltering · component property	boolean	—	no	true	inherited
requiredOnRamp · component property	enum	magic-transit \| cloudflare-wan	no	—	inherited
ruleCount	integer	—	no	—	inherited
stateful	boolean	—	no	—	▸ false

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "network-firewall", component: "cloudflare-network-firewall" }

Other Firewall products · 35

Cloud Firewallalibaba-cloud-firewallalibabacloudfirewall Network ACLalibaba-network-aclalibabacloudfirewall ECS Security Groupalibaba-security-groupalibabacloudfirewall Network ACLaws-network-aclawsfirewall AWS Network Firewallaws-network-firewallawsfirewall Amazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewall Security groupaws-security-groupawsfirewall Microsoft Entra Internet Accessazure-entra-internet-accessazurefirewall Azure Firewallazure-firewallazurefirewall Network Security Groupazure-network-security-groupazurefirewall Network security perimeterazure-network-security-perimeterazurefirewall Cloudflare DNS Firewallcloudflare-dns-firewallcloudflarefirewall Cloudflare Gatewaycloudflare-gatewaycloudflarefirewall Generic firewallfirewallfirewall Firewall appliancefirewall-appliancefirewall Fortinet FortiGatefortigatefirewall MikroTik RouterOSmikrotik-routerosfirewall nftablesnftablesfirewall OPNsenseopnsensefirewall Palo Alto Networks NGFWpalo-alto-ngfwfirewall pfSensepfsensefirewall Snortsnortfirewall Suricatasuricatafirewall VyOSvyosfirewall DigitalOcean Cloud Firewallsdigitalocean-cloud-firewalldigitaloceanfirewall Cloud IDSgoogle-cloud-idsgcpfirewall Cloud NGFWgoogle-cloud-ngfwgcpfirewall Secure Web Proxygoogle-secure-web-proxygcpfirewall IBM Cloud Hardware Firewallibm-firewallibmfirewall VPC Security Groupibm-security-groupibmfirewall NetworkPolicyk8s-network-policyk8sfirewall Network Firewalloci-network-firewallocifirewall Network Security Groupoci-network-security-groupocifirewall Security Listoci-security-listocifirewall Security Groupoutscale-security-groupoutscalefirewall

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Cloudflare Network Firewall (formerly Magic Firewall): firewall-as-a-service sold with Magic
3# Transit or Cloudflare WAN. It is not stateful — each packet is evaluated on its own — and all
4# traffic is permitted until a rule blocks it ("Cloudflare Network Firewall ruleset logic").
5schemaVersion: "1"
6type: "component"
7id: "cloudflare-network-firewall"
8kind: "firewall"
9provider: "cloudflare"
10docs: "https://developers.cloudflare.com/cloudflare-network-firewall/about/ruleset-logic/"
11aliases: ["Magic Firewall"]
12defaults:
13  managed: true
14  defaultAction: "allow"
15  stateful: false
16properties:
17  requiredOnRamp:
18    type: "enum"
19    values: ["magic-transit", "cloudflare-wan"]
20  packetFiltering:
21    type: "boolean"
22    default: true
23  intrusionDetection:
24    type: "boolean"
25    default: false

The same page as markdown, for an agent: /catalogue/components/cloudflare-network-firewall.md