---
title: Network security Changelog
image: https://edgetunnel-b2h.pages.dev/cf-twitter-card.png
---

> Documentation Index  
> Fetch the complete documentation index at: https://edgetunnel-b2h.pages.dev/changelog/llms.txt  
> Use this file to discover all available pages before exploring further. 

[Skip to content](#%5Ftop) 

# Changelog

New updates and improvements at Cloudflare.

[ Subscribe to RSS ](https://edgetunnel-b2h.pages.dev/changelog/rss/index.xml) [ View RSS feeds ](https://edgetunnel-b2h.pages.dev/fundamentals/new-features/available-rss-feeds/) 

Network security

![hero image](https://edgetunnel-b2h.pages.dev/_astro/hero.CVYJHPAd_26AMqX.svg) 

Jun 20, 2025
1. ### [CNI maintenance alerts](https://edgetunnel-b2h.pages.dev/changelog/post/2025-06-20-cni-maintenance-alerts/)  
[ Network Interconnect ](https://edgetunnel-b2h.pages.dev/network-interconnect/)  
Customers using Cloudflare Network Interconnect with the v1 dataplane can now subscribe to maintenance alert emails. These alerts notify you of planned maintenance windows that may affect your CNI circuits.  
For more information, refer to [Monitoring and alerts](https://edgetunnel-b2h.pages.dev/network-interconnect/monitoring-and-alerts/).

Jun 09, 2025
1. ### [More flexible fallback handling — Custom Errors now support fetching assets returned with 4xx or 5xx status codes](https://edgetunnel-b2h.pages.dev/changelog/post/2025-06-09-custom-errors-fetch-4xx-5xx-assets/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
[Custom Errors](https://edgetunnel-b2h.pages.dev/rules/custom-errors/) can now fetch and store [assets](https://edgetunnel-b2h.pages.dev/rules/custom-errors/create-rules/#create-a-custom-error-asset-dashboard) and [error pages](https://edgetunnel-b2h.pages.dev/rules/custom-errors/#error-pages) from your origin even if they are served with a 4xx or 5xx HTTP status code — previously, only 200 OK responses were allowed.

**What’s new:**

  * You can now upload error pages and error assets that return error status codes (for example, 403, 500, 502, 503, 504) when fetched.
  * These assets are stored and minified at the edge, so they can be reused across multiple Custom Error rules without triggering requests to the origin.  
This is especially useful for retrieving error content or downtime banners from your backend when you can’t override the origin status code.  
Learn more in the [Custom Errors](https://edgetunnel-b2h.pages.dev/rules/custom-errors/) documentation.

Jun 09, 2025
1. ### [Match Workers subrequests by upstream zone — cf.worker.upstream\_zone now supported in Transform Rules](https://edgetunnel-b2h.pages.dev/changelog/post/2025-06-09-transform-rule-subrequest-matching/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
You can now use the [cf.worker.upstream\_zone](https://edgetunnel-b2h.pages.dev/ruleset-engine/rules-language/fields/reference/cf.worker.upstream%5Fzone/) field in [Transform Rules](https://edgetunnel-b2h.pages.dev/rules/transform/) to control rule execution based on whether a request originates from [Workers](https://edgetunnel-b2h.pages.dev/workers/), including subrequests issued by Workers in other zones.  
![Match Workers subrequests by upstream zone in Transform Rules](https://edgetunnel-b2h.pages.dev/_astro/transform-rule-subrequest-matching.BeUBEN67_wWefn.webp)  

**What's new:**

  * `cf.worker.upstream_zone` is now supported in Transform Rules expressions.
  * Skip or apply logic conditionally when handling [Workers subrequests](https://edgetunnel-b2h.pages.dev/workers/platform/limits/#subrequests).  
For example, to add a header when the subrequest comes from another zone:  
Text in **Expression Editor** (replace `myappexample.com` with your domain):  
```txt  
(cf.worker.upstream_zone != "" and cf.worker.upstream_zone != "myappexample.com")  
```  
Selected operation under **Modify request header**: _Set static_

**Header name**: `X-External-Workers-Subrequest`

**Value**: `1`  
This gives you more granular control in how you handle incoming requests for your zone.  
Learn more in the [Transform Rules](https://edgetunnel-b2h.pages.dev/rules/transform/) documentation and [Rules language fields](https://edgetunnel-b2h.pages.dev/ruleset-engine/rules-language/fields/reference/) reference.

May 30, 2025
1. ### [Fine-tune image optimization — WebP now supported in Configuration Rules](https://edgetunnel-b2h.pages.dev/changelog/post/2025-05-30-configuration-rules-webp/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
You can now enable [Polish](https://edgetunnel-b2h.pages.dev/images/polish/activate-polish/) with the `webp` format directly in [Configuration Rules](https://edgetunnel-b2h.pages.dev/rules/configuration-rules/), allowing you to optimize image delivery for specific routes, user agents, or A/B tests — without applying changes zone-wide.

**What’s new:**

  * [WebP](https://edgetunnel-b2h.pages.dev/images/polish/compression/#webp) is now a supported [value](https://edgetunnel-b2h.pages.dev/rules/configuration-rules/settings/#polish) in the **Polish** setting for Configuration Rules.  
This gives you more precise control over how images are compressed and delivered, whether you're targeting modern browsers, running experiments, or tailoring performance by geography or device type.  
Learn more in the [Polish](https://edgetunnel-b2h.pages.dev/images/polish/) and [Configuration Rules](https://edgetunnel-b2h.pages.dev/rules/configuration-rules/) documentation.

May 09, 2025
1. ### [More ways to match — Snippets now support Custom Lists, Bot Score, and WAF Attack Score](https://edgetunnel-b2h.pages.dev/changelog/post/2025-05-09-snippets-cloud-connector-lists-waf-bot-scores/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
You can now use IP, Autonomous System (AS), and Hostname [custom lists](https://edgetunnel-b2h.pages.dev/waf/tools/lists/custom-lists/) to route traffic to [Snippets](https://edgetunnel-b2h.pages.dev/rules/snippets/) and [Cloud Connector](https://edgetunnel-b2h.pages.dev/rules/cloud-connector/), giving you greater precision and control over how you match and process requests at the edge.  
In Snippets, you can now also match on [Bot Score](https://edgetunnel-b2h.pages.dev/bots/concepts/bot-score/) and [WAF Attack Score](https://edgetunnel-b2h.pages.dev/waf/detections/attack-score/), unlocking smarter edge logic for everything from request filtering and mitigation to [tarpitting](https://edgetunnel-b2h.pages.dev/rules/snippets/examples/slow-suspicious-requests/) and logging.

**What’s new:**

  * [Custom lists](https://edgetunnel-b2h.pages.dev/waf/tools/lists/custom-lists/) matching – Snippets and Cloud Connector now support user-created IP, AS, and Hostname lists via dashboard or [Lists API](https://edgetunnel-b2h.pages.dev/api/resources/rules/subresources/lists/methods/list/). Great for shared logic across zones.
  * [Bot Score](https://edgetunnel-b2h.pages.dev/bots/concepts/bot-score/) and [WAF Attack Score](https://edgetunnel-b2h.pages.dev/waf/detections/attack-score/) – Use Cloudflare’s intelligent traffic signals to detect bots or attacks and take advanced, tailored actions with just a few lines of code.  
![New fields in Snippets](https://edgetunnel-b2h.pages.dev/_astro/snippets-lists-scores.D05l6zgc_ZG4Rof.webp)  
These enhancements unlock new possibilities for building smarter traffic workflows with minimal code and maximum efficiency.  
Learn more in the [Snippets](https://edgetunnel-b2h.pages.dev/rules/snippets/) and [Cloud Connector](https://edgetunnel-b2h.pages.dev/rules/cloud-connector/) documentation.

Apr 30, 2025
1. ### [Cloudflare One Appliance supports multiple DNS server IPs](https://edgetunnel-b2h.pages.dev/changelog/post/2025-04-30-appliance-multiple-dns-servers/)  
[ Cloudflare One Appliance ](https://edgetunnel-b2h.pages.dev/cloudflare-wan/configuration/appliance/)[ Cloudflare One ](https://edgetunnel-b2h.pages.dev/cloudflare-one/)[ Cloudflare WAN ](https://edgetunnel-b2h.pages.dev/cloudflare-wan/)  
Cloudflare One Appliance DHCP server settings now support specifying multiple DNS server IP addresses in the DHCP pool.  
Previously, customers could only configure a single DNS server per DHCP pool. With this update, you can specify multiple DNS servers to provide redundancy for clients at branch locations.  
For configuration details, refer to [DHCP server](https://edgetunnel-b2h.pages.dev/cloudflare-wan/configuration/appliance/network-options/dhcp/dhcp-server/).

Apr 24, 2025
1. ### [Custom Errors are now Generally Available](https://edgetunnel-b2h.pages.dev/changelog/post/2025-04-24-custom-errors-ga/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
[Custom Errors](https://edgetunnel-b2h.pages.dev/rules/custom-errors/) are now generally available for all paid plans — bringing a unified and powerful experience for customizing error responses at both the zone and account levels.  
You can now manage **Custom Error Rules**, **Custom Error Assets**, and redesigned **Error Pages** directly from the Cloudflare dashboard. These features let you deliver tailored messaging when errors occur, helping you maintain brand consistency and improve user experience — whether it’s a 404 from your origin or a security challenge from Cloudflare.  
What's new:

  * **Custom Errors are now GA** – Available on all paid plans and ready for production traffic.
  * **UI for Custom Error Rules and Assets** – Manage your zone-level rules from the Rules > Overview and your zone-level assets from the Rules > Settings tabs.
  * **Define inline content or upload assets** – Create custom responses directly in the rule builder, upload new or reuse previously stored assets.
  * **Refreshed UI and new name for Error Pages** – Formerly known as “Custom Pages,” Error Pages now offer a cleaner, more intuitive experience for both zone and account-level configurations.
  * **Powered by Ruleset Engine** – Custom Error Rules support [conditional logic](https://edgetunnel-b2h.pages.dev/ruleset-engine/rules-language/) and override Error Pages for 500 and 1000 class errors, as well as errors originating from your origin or [other Cloudflare products](https://edgetunnel-b2h.pages.dev/ruleset-engine/reference/phases-list/). You can also configure [Response Header Transform Rules](https://edgetunnel-b2h.pages.dev/rules/transform/response-header-modification/) to add, change, or remove HTTP headers from responses returned by Custom Error Rules.  
Learn more in the [Custom Errors documentation](https://edgetunnel-b2h.pages.dev/rules/custom-errors/).

Apr 09, 2025
1. ### [Cloudflare Snippets are now Generally Available](https://edgetunnel-b2h.pages.dev/changelog/post/2025-04-09-snippets-ga/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
![Cloudflare Snippets are now GA](https://edgetunnel-b2h.pages.dev/_astro/snippets-ga.BJr3csvv_Z2q49jT.webp)  
[Cloudflare Snippets](https://edgetunnel-b2h.pages.dev/rules/snippets/) are now generally available at no extra cost across all paid plans — giving you a fast, flexible way to programmatically control HTTP traffic using lightweight JavaScript.  
You can now use Snippets to modify HTTP requests and responses with confidence, reliability, and scale. Snippets are production-ready and deeply integrated with Cloudflare Rules, making them ideal for everything from quick dynamic header rewrites to advanced routing logic.  
What's new:

  * **Snippets are now GA** – Available at no extra cost on all Pro, Business, and Enterprise plans.
  * **Ready for production** – Snippets deliver a production-grade experience built for scale.
  * **Part of the Cloudflare Rules platform** – Snippets inherit request modifications from other Cloudflare products and support sequential execution, allowing you to run multiple Snippets on the same request and apply custom modifications step by step.
  * **Trace integration** – Use [Cloudflare Trace](https://edgetunnel-b2h.pages.dev/rules/trace-request/) to see which Snippets were triggered on a request — helping you understand traffic flow and debug more effectively.  
  ![Snippets shown in Cloudflare Trace results](https://edgetunnel-b2h.pages.dev/_astro/snippets-ga-trace.WlCshaFo_1WNo07.webp)  
Learn more in the [launch blog post ↗](https://blog.cloudflare.com/snippets/).

Mar 13, 2025
1. ### [Cloudflare IP Ranges List](https://edgetunnel-b2h.pages.dev/changelog/post/2025-03-13-new-managed-iplist/)  
[ Cloudflare Network Firewall ](https://edgetunnel-b2h.pages.dev/cloudflare-network-firewall/)  
Magic Firewall now supports a new managed list of Cloudflare IP ranges. This list is available as an option when creating a Magic Firewall policy based on IP source/destination addresses. When selecting "is in list" or "is not in list", the option "**Cloudflare IP Ranges**" will appear in the dropdown menu.  
This list is based on the IPs listed in the Cloudflare [IP ranges ↗](https://www.cloudflare.com/en-gb/ips/). Updates to this managed list are applied automatically.  
![Cloudflare IPs Managed List](https://edgetunnel-b2h.pages.dev/_astro/cloudflare-ips.DetyOndL_10JG5B.webp)  
Note: IP Lists require a Cloudflare Advanced Network Firewall subscription. For more details about Cloudflare Network Firewall plans, refer to [Plans](https://edgetunnel-b2h.pages.dev/cloudflare-network-firewall/plans).

Feb 14, 2025
1. ### [Configure your Magic WAN Connector to connect via static IP assignment](https://edgetunnel-b2h.pages.dev/changelog/post/2025-02-14-local-console-access/)  
[ Cloudflare One Appliance ](https://edgetunnel-b2h.pages.dev/cloudflare-wan/configuration/appliance/)[ Cloudflare One ](https://edgetunnel-b2h.pages.dev/cloudflare-one/)[ Cloudflare WAN ](https://edgetunnel-b2h.pages.dev/cloudflare-wan/)  
You can now locally configure your [Magic WAN Connector](https://edgetunnel-b2h.pages.dev/cloudflare-wan/configuration/appliance/) to work in a static IP configuration.  
This local method does not require having access to a DHCP Internet connection. However, it does require being comfortable with using tools to access the serial port on Magic WAN Connector as well as using a serial terminal client to access the Connector's environment.  
For more details, refer to [WAN with a static IP address](https://edgetunnel-b2h.pages.dev/cloudflare-wan/configuration/appliance/configure-hardware-appliance/#bootstrap-via-serial-console).

Feb 12, 2025
1. ### [Increased Cloudflare Rules limits](https://edgetunnel-b2h.pages.dev/changelog/post/2025-02-12-rules-upgraded-limits/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
We have upgraded and streamlined [Cloudflare Rules](https://edgetunnel-b2h.pages.dev/rules/) limits across all plans, simplifying rule management and improving scalability for everyone.

**New limits by product:**

  * [Bulk Redirects](https://edgetunnel-b2h.pages.dev/rules/url-forwarding/bulk-redirects/)  
    * Free: **20** → **10,000** URL redirects across lists
    * Pro: **500** → **25,000** URL redirects across lists
    * Business: **500** → **50,000** URL redirects across lists
    * Enterprise: **10,000** → **1,000,000** URL redirects across lists
  * [Cloud Connector](https://edgetunnel-b2h.pages.dev/rules/cloud-connector/)  
    * Free: **5** → **10** connectors
    * Enterprise: **125** → **300** connectors
  * [Custom Errors](https://edgetunnel-b2h.pages.dev/rules/custom-errors/)  
    * Pro: **5** → **25** error assets and rules
    * Business: **20** → **50** error assets and rules
    * Enterprise: **50** → **300** error assets and rules
  * [Snippets](https://edgetunnel-b2h.pages.dev/rules/snippets/)  
    * Pro: **10** → **25** code snippets and rules
    * Business: **25** → **50** code snippets and rules
    * Enterprise: **50** → **300** code snippets and rules
  * [Cache Rules](https://edgetunnel-b2h.pages.dev/cache/how-to/cache-rules/), [Configuration Rules](https://edgetunnel-b2h.pages.dev/rules/configuration-rules/), [Compression Rules](https://edgetunnel-b2h.pages.dev/rules/compression-rules/), [Origin Rules](https://edgetunnel-b2h.pages.dev/rules/origin-rules/), [Single Redirects](https://edgetunnel-b2h.pages.dev/rules/url-forwarding/single-redirects/), and [Transform Rules](https://edgetunnel-b2h.pages.dev/rules/transform/)  
    * Enterprise: **125** → **300** rules  
Gradual rollout  
Limits are updated gradually. Some customers may still see previous limits until the rollout is fully completed in the first half of 2025.

Feb 11, 2025
1. ### [Custom Errors (beta): Stored Assets & Account-level Rules](https://edgetunnel-b2h.pages.dev/changelog/post/2025-02-11-custom-errors-beta/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
We're introducing [Custom Errors](https://edgetunnel-b2h.pages.dev/rules/custom-errors/) (beta), which builds on our existing Custom Error Responses feature with new asset storage capabilities.  
This update allows you to store externally hosted error pages on Cloudflare and reference them in custom error rules, eliminating the need to supply inline content.  
This brings the following new capabilities:

  * **Custom error assets** – Fetch and store external error pages at the edge for use in error responses.
  * **Account-Level custom errors** – Define error handling rules and assets at the account level for consistency across multiple zones. Zone-level rules take precedence over account-level ones, and assets are not shared between levels.  
You can use Cloudflare API to upload your existing assets for use with Custom Errors:  
```bash  
curl "https://api.cloudflare.com/client/v4/zones/{zone_id}/custom_pages/assets" \
--header "Authorization: Bearer <API_TOKEN>" \
--header 'Content-Type: application/json' \
--data '{  
  "name": "maintenance",  
  "description": "Maintenance template page",  
  "url": "https://example.com/"  
}'  
```  
You can then reference the stored asset in a Custom Error rule:  
```bash  
curl --request PUT \  
"https://api.cloudflare.com/client/v4/zones/{zone_id}/rulesets/phases/http_custom_errors/entrypoint" \
--header "Authorization: Bearer <API_TOKEN>" \
--header 'Content-Type: application/json' \
--data '{  
  "rules": [  
    {  
      "action": "serve_error",  
      "action_parameters": {  
        "asset_name": "maintenance",  
        "content_type": "text/html",  
        "status_code": 503  
      },  
      "enabled": true,  
      "expression": "http.request.uri.path contains \"error\""  
    }  
  ]  
}'  
```

Jan 29, 2025
1. ### [New Snippets Code Editor](https://edgetunnel-b2h.pages.dev/changelog/post/2025-01-29-snippets-code-editor/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
The new [Snippets](https://edgetunnel-b2h.pages.dev/rules/snippets/) code editor lets you edit Snippet code and rule in one place, making it easier to test and deploy changes without switching between pages.  
![New Snippets code editor](https://edgetunnel-b2h.pages.dev/_astro/snippets-new-editor.CaoIu2_-_Z2rsmyM.webp)  
What’s new:

  * **Single-page editing for code and rule** – No need to jump between screens.
  * **Auto-complete & syntax highlighting** – Get suggestions and avoid mistakes.
  * **Code formatting & refactoring** – Write cleaner, more readable code.  
Try it now in [Rules > Snippets ↗](https://dash.cloudflare.com/?to=/:account/:zone/rules/snippets).

Jan 09, 2025
1. ### [New Rules Overview Interface](https://edgetunnel-b2h.pages.dev/changelog/post/2025-01-09-rules-overview/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  

**Rules Overview** gives you a single page to manage all your [Cloudflare Rules](https://edgetunnel-b2h.pages.dev/rules/).  
What you can do:

  * **See all your rules in one place** – No more clicking around.
  * **Find rules faster** – Search by name.
  * **Understand execution order** – See how rules run in sequence.
  * **Debug easily** – Use [Trace](https://edgetunnel-b2h.pages.dev/rules/trace-request/) without switching tabs.  
Check it out in [Rules > Overview ↗](https://dash.cloudflare.com/?to=/:account/:zone/rules/overview).

Dec 19, 2024
1. ### [Troubleshoot tunnels with diagnostic logs](https://edgetunnel-b2h.pages.dev/changelog/post/2024-12-19-diagnostic-logs/)  
[ Cloudflare Tunnel ](https://edgetunnel-b2h.pages.dev/tunnel/)[ Cloudflare Tunnel for SASE ](https://edgetunnel-b2h.pages.dev/cloudflare-one/networks/connectors/cloudflare-tunnel/)  
The latest `cloudflared` build [2024.12.2 ↗](https://github.com/cloudflare/cloudflared/releases/tag/2024.12.2) introduces the ability to collect all the diagnostic logs needed to troubleshoot a `cloudflared` instance.  
A diagnostic report collects data from a single instance of `cloudflared` running on the local machine and outputs it to a `cloudflared-diag` file.  
For more information, refer to [Diagnostic logs](https://edgetunnel-b2h.pages.dev/cloudflare-one/networks/connectors/cloudflare-tunnel/troubleshoot-tunnels/diag-logs/).

Dec 17, 2024
1. ### [Establish BGP peering over Direct CNI circuits](https://edgetunnel-b2h.pages.dev/changelog/post/2024-12-17-bgp-support-cni/)  
[ Magic Transit ](https://edgetunnel-b2h.pages.dev/magic-transit/)[ Cloudflare WAN ](https://edgetunnel-b2h.pages.dev/cloudflare-wan/)[ Network Interconnect ](https://edgetunnel-b2h.pages.dev/network-interconnect/)  
Magic WAN and Magic Transit customers can use the Cloudflare dashboard to configure and manage BGP peering between their networks and their Magic routing table when using a Direct CNI on-ramp.  
Using BGP peering allows customers to:

  * Automate the process of adding or removing networks and subnets.
  * Take advantage of failure detection and session recovery features.  
With this functionality, customers can:

  * Establish an eBGP session between their devices and the Magic WAN / Magic Transit service when connected via CNI.
  * Secure the session by MD5 authentication to prevent misconfigurations.
  * Exchange routes dynamically between their devices and their Magic routing table.  
Refer to [Magic WAN BGP peering](https://edgetunnel-b2h.pages.dev/cloudflare-wan/configuration/how-to/configure-routes/#configure-bgp-routes) or [Magic Transit BGP peering](https://edgetunnel-b2h.pages.dev/magic-transit/how-to/configure-routes/#configure-bgp-routes) to learn more about this feature and how to set it up.

Dec 11, 2024
1. ### [Terraform Support for Snippets](https://edgetunnel-b2h.pages.dev/changelog/post/2024-12-11-terraform-snippets/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
Now, you can manage [Cloudflare Snippets](https://edgetunnel-b2h.pages.dev/rules/snippets/) with [Terraform](https://edgetunnel-b2h.pages.dev/terraform/). Use infrastructure-as-code to deploy and update Snippet code and rules without manual changes in the dashboard.  
Example Terraform configuration:  
```tf  
resource "cloudflare_snippet" "my_snippet" {  
  zone_id  = "<ZONE_ID>"  
  name = "my_test_snippet_1"  
  main_module = "file1.js"  
  files {  
    name = "file1.js"  
    content = file("file1.js")  
  }  
}  
resource "cloudflare_snippet_rules" "cookie_snippet_rule" {  
  zone_id  = "<ZONE_ID>"  
  rules {  
    enabled = true  
    expression = "http.cookie eq \"a=b\""  
    description = "Trigger snippet on specific cookie"  
    snippet_name = "my_test_snippet_1"  
  }  
  depends_on = [cloudflare_snippet.my_snippet]  
}  
```  
Learn more in the [Configure Snippets using Terraform](https://edgetunnel-b2h.pages.dev/rules/snippets/create-terraform/) documentation.

Dec 05, 2024
1. ### [Generate customized terraform files for building cloud network on-ramps](https://edgetunnel-b2h.pages.dev/changelog/post/2024-12-05-cloud-onramp-terraform/)  
[ Multi-Cloud Networking ](https://edgetunnel-b2h.pages.dev/multi-cloud-networking/)  
You can now generate customized terraform files for building cloud network on-ramps to [Magic WAN](https://edgetunnel-b2h.pages.dev/cloudflare-wan/).  
[Magic Cloud](https://edgetunnel-b2h.pages.dev/multi-cloud-networking/) can scan and discover existing network resources and generate the required terraform files to automate cloud resource deployment using their existing infrastructure-as-code workflows for cloud automation.  
You might want to do this to:

  * Review the proposed configuration for an on-ramp before deploying it with Cloudflare.
  * Deploy the on-ramp using your own infrastructure-as-code pipeline instead of deploying it with Cloudflare.  
For more details, refer to [Set up with Terraform](https://edgetunnel-b2h.pages.dev/multi-cloud-networking/cloud-on-ramps/#set-up-with-terraform).

Nov 22, 2024
1. ### [Cloud Connector Now Supports R2](https://edgetunnel-b2h.pages.dev/changelog/post/2024-11-22-cloud-connector-r2/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
Now, you can use [Cloud Connector](https://edgetunnel-b2h.pages.dev/rules/cloud-connector/) to route traffic to your [R2 buckets](https://edgetunnel-b2h.pages.dev/r2/) based on URLs, headers, geolocation, and more.  
Example setup:  
```bash  
curl --request PUT \  
"https://api.cloudflare.com/client/v4/zones/{zone_id}/cloud_connector/rules" \
--header "Authorization: Bearer <API_TOKEN>" \
--header "Content-Type: application/json" \
--data '[  
  {  
    "expression": "http.request.uri.path wildcard \"/images/*\"",  
    "provider": "cloudflare_r2",  
    "description": "Connect to R2 bucket containing images",  
    "parameters": {  
      "host": "mybucketcustomdomain.example.com"  
    }  
  }  
]'  
```  
Get started using [Cloud Connector](https://edgetunnel-b2h.pages.dev/rules/cloud-connector/) documentation.

Oct 23, 2024
1. ### [Simplified UI for URL Rewrites](https://edgetunnel-b2h.pages.dev/changelog/post/2024-10-23-url-rewrites-wildcard/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
It’s now easy to create **wildcard-based [URL Rewrites](https://edgetunnel-b2h.pages.dev/rules/transform/url-rewrite/)**. No need for complex functions—just define your patterns and go.  
![Rules Overview Interface](https://edgetunnel-b2h.pages.dev/_astro/create-url-rewrite-rule.DIgpB8IB_ZNTjfK.webp)  
What’s improved:

  * **Full wildcard support** – Create rewrite patterns using intuitive interface.
  * **Simplified rule creation** – No need for complex functions.  
Try it via [creating a Rewrite URL rule in the dashboard](https://edgetunnel-b2h.pages.dev/rules/transform/url-rewrite/create-dashboard/#wildcard-pattern-parameters).

Oct 02, 2024
1. ### [Search for custom rules using rule name and/or ID](https://edgetunnel-b2h.pages.dev/changelog/post/2024-10-02-custom-rule-search/)  
[ Cloudflare Network Firewall ](https://edgetunnel-b2h.pages.dev/cloudflare-network-firewall/)  
The Magic Firewall dashboard now allows you to search custom rules using the rule name and/or ID.

  1. Log into the [Cloudflare dashboard ↗](https://dash.cloudflare.com) and select your account.
  2. Go to **Analytics & Logs** \> **Network Analytics**.
  3. Select **Magic Firewall**.
  4. Add a filter for **Rule ID**.  
![Search for firewall rules with rule IDs](https://edgetunnel-b2h.pages.dev/_astro/search-with-rule-id.DJgzqgKk_2jJ9x8.webp)  
Additionally, the rule ID URL link has been added to Network Analytics.

Sep 24, 2024
1. ### [Try out Magic Network Monitoring](https://edgetunnel-b2h.pages.dev/changelog/post/2024-09-24-magic-network-monitoring/)  
[ Network Flow ](https://edgetunnel-b2h.pages.dev/network-flow/)  
The free version of Magic Network Monitoring (MNM) is now available to everyone with a Cloudflare account by default.

  1. Log in to your [Cloudflare dashboard ↗](https://dash.cloudflare.com), and select your account.
  2. Go to **Analytics & Logs** \> **Magic Monitoring**.  
![Try out the free version of Magic Network Monitoring](https://edgetunnel-b2h.pages.dev/_astro/get-started.D7KXWcs4_Z1KOQrC.webp)  
For more details, refer to the [Get started guide](https://edgetunnel-b2h.pages.dev/network-flow/get-started/).

Sep 05, 2024
1. ### [New Rules Templates for One-Click Rule Creation](https://edgetunnel-b2h.pages.dev/changelog/post/2024-09-05-rules-templates/)  
[ Rules ](https://edgetunnel-b2h.pages.dev/rules/)  
Now, you can create **common rule configurations** in just **one click** using Rules Templates.  
![Rules Templates](https://edgetunnel-b2h.pages.dev/_astro/rules-templates.DAV0GOXF_Z2wOoyL.webp)  
What you can do:

  * **Pick a pre-built rule** – Choose from a library of templates.
  * **One-click setup** – Deploy best practices instantly.
  * **Customize as needed** – Adjust templates to fit your setup.  
Template cards are now also available directly in the rule builder for each product.  
Need more ideas? Check out the [Examples gallery](https://edgetunnel-b2h.pages.dev/rules/examples/) in our documentation.

Jun 16, 2024
1. ### [Explore product updates for Cloudflare One](https://edgetunnel-b2h.pages.dev/changelog/post/2024-06-16-cloudflare-one/)  
[ Access ](https://edgetunnel-b2h.pages.dev/cloudflare-one/access-controls/policies/)[ Browser Isolation ](https://edgetunnel-b2h.pages.dev/cloudflare-one/remote-browser-isolation/)[ CASB ](https://edgetunnel-b2h.pages.dev/cloudflare-one/integrations/cloud-and-saas/)[ Cloudflare Tunnel for SASE ](https://edgetunnel-b2h.pages.dev/cloudflare-one/networks/connectors/cloudflare-tunnel/)[ Digital Experience Monitoring ](https://edgetunnel-b2h.pages.dev/cloudflare-one/insights/dex/)[ Data Loss Prevention ](https://edgetunnel-b2h.pages.dev/cloudflare-one/data-loss-prevention/)[ Email security ](https://edgetunnel-b2h.pages.dev/cloudflare-one/email-security/)[ Gateway ](https://edgetunnel-b2h.pages.dev/cloudflare-one/traffic-policies/)[ Multi-Cloud Networking ](https://edgetunnel-b2h.pages.dev/multi-cloud-networking/)[ Cloudflare Network Firewall ](https://edgetunnel-b2h.pages.dev/cloudflare-network-firewall/)[ Network Flow ](https://edgetunnel-b2h.pages.dev/network-flow/)[ Magic Transit ](https://edgetunnel-b2h.pages.dev/magic-transit/)[ Cloudflare WAN ](https://edgetunnel-b2h.pages.dev/cloudflare-wan/)[ Network Interconnect ](https://edgetunnel-b2h.pages.dev/network-interconnect/)[ Risk Score ](https://edgetunnel-b2h.pages.dev/cloudflare-one/insights/risk-score/)[ Cloudflare One Client ](https://edgetunnel-b2h.pages.dev/cloudflare-one/team-and-resources/devices/cloudflare-one-client/)  
Welcome to your new home for product updates on [Cloudflare One](https://edgetunnel-b2h.pages.dev/cloudflare-one/).  
Our [new changelog](https://edgetunnel-b2h.pages.dev/changelog/) lets you read about changes in much more depth, offering in-depth examples, images, code samples, and even gifs.  
If you are looking for older product updates, refer to the following locations.  
Older product updates

  * [Access](https://edgetunnel-b2h.pages.dev/cloudflare-one/changelog/access/)
  * [Browser Isolation](https://edgetunnel-b2h.pages.dev/cloudflare-one/changelog/browser-isolation/)
  * [CASB](https://edgetunnel-b2h.pages.dev/cloudflare-one/changelog/casb/)
  * [Cloudflare Tunnel](https://edgetunnel-b2h.pages.dev/cloudflare-one/changelog/tunnel/)
  * [Data Loss Prevention](https://edgetunnel-b2h.pages.dev/cloudflare-one/changelog/dlp/)
  * [Digital Experience Monitoring](https://edgetunnel-b2h.pages.dev/cloudflare-one/changelog/dex/)
  * [Email security](https://edgetunnel-b2h.pages.dev/cloudflare-one/changelog/email-security/)
  * [Gateway](https://edgetunnel-b2h.pages.dev/cloudflare-one/changelog/gateway/)
  * [Multi-Cloud Networking](https://edgetunnel-b2h.pages.dev/multi-cloud-networking/changelog/)
  * [Cloudflare Network Firewall](https://edgetunnel-b2h.pages.dev/cloudflare-network-firewall/changelog/)
  * [Magic Network Monitoring](https://edgetunnel-b2h.pages.dev/network-flow/changelog/)
  * [Magic Transit](https://edgetunnel-b2h.pages.dev/magic-transit/changelog/)
  * [Magic WAN](https://edgetunnel-b2h.pages.dev/cloudflare-wan/changelog/)
  * [Network Interconnect](https://edgetunnel-b2h.pages.dev/network-interconnect/changelog/)
  * [Risk score](https://edgetunnel-b2h.pages.dev/cloudflare-one/changelog/risk-score/)
  * [Cloudflare One Client](https://edgetunnel-b2h.pages.dev/changelog/cloudflare-one-client/)

```json
{"@context":"https://schema.org","@type":"BlogPosting","@id":"https://edgetunnel-b2h.pages.dev/changelog/product-group/network-security/3/#page","headline":"Network security Changelog | Cloudflare Docs","url":"https://edgetunnel-b2h.pages.dev/changelog/product-group/network-security/3/","inLanguage":"en","image":"https://edgetunnel-b2h.pages.dev/cf-twitter-card.png","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://edgetunnel-b2h.pages.dev/#website","name":"Cloudflare Docs","url":"https://edgetunnel-b2h.pages.dev/"}}
```
