skills.rest
vedang
vedangCOMMUNITY
Explore all skills by this author →
Website𝕏@vedangGitHub

cloudflare-one

Guides design, configuration, and troubleshooting of Cloudflare One Zero Trust and SASE deployments.

13|1|Updated Feb 9, 2026
Search Tags:#zero trust#gateway#warp#cloudflare tunnel#sase#ztna#cloudflare one
One-click install
npx skills add https://github.com/vedang/dotagents --skill cloudflare-one-vedang
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloudflare-one
Source: https://github.com/vedang/dotagents/tree/main/specific_skills/cloudflare-one
Command: npx skills add https://github.com/vedang/dotagents --skill cloudflare-one-vedang

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Cloudflare One spans many products (Access, Gateway, WARP, Tunnel, WAN, DLP, CASB), and misconfiguring any of them can break connectivity or weaken security. This Skill provides a retrieval-first workflow with assessment prompts, guardrails, and validation checklists so changes are grounded in current Cloudflare docs rather than stale assumptions. ## Core Features & Use Cases - Structured Workflow: Classifies requests (architecture, configuration, troubleshooting, migration, review), gathers context, retrieves current docs, and proposes change sets with rollback plans. - Domain Guardrails: Encodes hard-won rules for split tunnel modes, device profiles, enrollment rules, TLS inspection, DLP rollout, CASB scans, and Cloudflare WAN connectivity. - Use Case: When migrating remote users from a legacy VPN to Cloudflare, use this Skill to plan tunnel routes, choose Include vs Exclude split tunnel mode, configure Access policies, and validate end-to-end connectivity before broad rollout. ## Quick Start Ask the agent to design a Cloudflare One rollout plan for replacing your VPN with Access and Tunnel for 500 remote users.

Frequently Asked Questions about cloudflare-one

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Cloudflare Access for a private application?▼

Private applications require the WARP device client or another network on-ramp plus tunnel routes and DNS resolution, not just an Access app. Create the Access application, define Allow policies, publish routes through cloudflared, and configure resolver policies for private hostnames.

Should I use Include or Exclude split tunnel mode in Cloudflare WARP?▼

Use Include mode for VPN replacement only, routing just private CIDRs through the client. Use Exclude mode for secure web gateway deployments where all traffic goes through Cloudflare except specific exclusions. The mode is per-profile and cannot be mixed.

Does Cloudflare Gateway require TLS inspection for DLP?▼

Yes, DLP inspection of encrypted web traffic requires TLS decryption with the Cloudflare root CA deployed to managed devices. Certificate-pinned applications need Do Not Inspect exceptions configured before enabling broad inspection.

Why is my Cloudflare Access policy blocking valid users?▼

Access policies are default-deny, so a missing Allow rule blocks everyone. Common causes include case-sensitive group name mismatches, stale SCIM group sync, or missing IdP claims. Check Access audit logs to see which policy matched the authentication attempt.

What is the difference between Cloudflare Tunnel and Cloudflare WAN?▼

Cloudflare Tunnel is an off-ramp connecting private networks to Cloudflare via cloudflared connectors. Cloudflare WAN provides site-to-site connectivity and can act as both on-ramp and off-ramp, but is gated behind Enterprise subscriptions.

Related Skills

Explore More Software Engineering Skills→
xalgordxalgord
954

implementing-cisa-zero-trust-maturity-model

Assess and implement CISA Zero Trust Maturity Model v2.0 across five pillars.

Community
Intermediate
starwreckntxstarwreckntx

Security Information & Event Management Agent

Aggregate and correlate logs from multiple sources to detect security incidents.

Community
Basic
automateyournetworkautomateyournetwork
650

zscaler-identity

Manage Zscaler users, groups, departments, and identity provider configurations via OneAPI.

Community
Basic
Arupbiswas09Arupbiswas09

cloudflare-one-migrations

Plan and execute migrations from legacy security stacks to Cloudflare One.

Community
Advanced