Cloudflare Zero Trust

Protect internal apps with Cloudflare Access, device posture, and Zero Trust policies.

majiayu000 07d9b67 2 files · 1.9 KB Updated 567 repo stars

File contents

Cloudflare Zero Trust

Secure access to internal services without exposing public VPN endpoints.

Core Workflow

  1. Register application in Cloudflare Access.
  2. Integrate identity provider (Google Workspace, Okta, Entra ID).
  3. Define access policies by group, email domain, and device posture.
  4. Add logging and alerts for blocked requests.

Tunnel Setup

cloudflared tunnel login
cloudflared tunnel create internal-app
cloudflared tunnel route dns internal-app app.example.com
cloudflared tunnel run internal-app

Best Practices

  • Enforce MFA and managed-device posture checks.
  • Use service tokens for CI/CD automation.
  • Review app policies quarterly.

Related Skills

majiayu000/claude-skill-registry-data/tree/main/security/cloudflare-zero-trust commit 07d9b67aa8

Frequently asked questions

npx skillmds add majiayu000/cloudflare-zero-trust