Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Gateway] DNS resolver BYOIP #19183

Merged
merged 6 commits into from
Jan 16, 2025
Merged

[Gateway] DNS resolver BYOIP #19183

merged 6 commits into from
Jan 16, 2025

Conversation

maxvp
Copy link
Contributor

@maxvp maxvp commented Jan 13, 2025

PCX-11117

Copy link
Contributor

@hyperlint-ai hyperlint-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

3 files reviewed, 2 total issue(s) found.


Gateway uses the public source IPv4 address of your network to identify your DNS location, apply policies and log DNS requests. Unless you have purchased a [dedicated IPv4 resolver IP](#dns-resolver-ip), you must provide source IP addresses for the IPv4 traffic you want to filter with DNS policies. Otherwise, Gateway will not be able to attribute the traffic to your account.
When you create a DNS location, Gateway will resolve queries over IPv4 with the default DNS resolver IP addresses. These addresses are Anycast IP addresses shared across every Cloudflare Zero Trust account. To resolve queries over IPv6, your location will receive and use a unique DNS resolver IPv6 address. These IP addresses are how Gateway will match DNS queries to locations and apply the appropriate filtering rules.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
When you create a DNS location, Gateway will resolve queries over IPv4 with the default DNS resolver IP addresses. These addresses are Anycast IP addresses shared across every Cloudflare Zero Trust account. To resolve queries over IPv6, your location will receive and use a unique DNS resolver IPv6 address. These IP addresses are how Gateway will match DNS queries to locations and apply the appropriate filtering rules.
When you create a DNS location, Gateway will resolve queries over IPv4 with the default DNS resolver IP addresses. These addresses are anycast IP addresses shared across every Cloudflare Zero Trust account. To resolve queries over IPv6, your location will receive and use a unique DNS resolver IPv6 address. These IP addresses are how Gateway will match DNS queries to locations and apply the appropriate filtering rules.

Issues:

  • Style Guide - (Terms-error) Use 'anycast' instead of 'Anycast'.

Fix Explanation:

The term 'Anycast' should be changed to 'anycast' to comply with the style guide's capitalization rules. This change does not affect code references or templating language syntax, so it is safe to apply.


If you are on the Enterprise plan, you have the option of manually entering one or more source IP addresses of your choice. This enables you to create Gateway DNS locations even if you are not connecting from any of those networks' IP addresses.
Enterprise users can request a dedicated DNS resolver IPv4 address to be provisioned for a DNS location instead of the default Anycast addresses. Queries forwarded to that address will be identified using the dedicated DNS resolver IPv4 address.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Enterprise users can request a dedicated DNS resolver IPv4 address to be provisioned for a DNS location instead of the default Anycast addresses. Queries forwarded to that address will be identified using the dedicated DNS resolver IPv4 address.
Enterprise users can request a dedicated DNS resolver IPv4 address to be provisioned for a DNS location instead of the default anycast addresses. Queries forwarded to that address will be identified using the dedicated DNS resolver IPv4 address.

Issues:

  • Style Guide - (Terms-error) Use 'anycast' instead of 'Anycast'.

Fix Explanation:

The term 'Anycast' should be lowercase 'anycast' as per the style guide recommendation. This is a straightforward capitalization correction.

Copy link

Deploying cloudflare-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: db94fc1
Status: ✅  Deploy successful!
Preview URL: https://d5ab472a.cloudflare-docs-7ou.pages.dev
Branch Preview URL: https://max-gw-byoip-locations.cloudflare-docs-7ou.pages.dev

View logs

@maxvp maxvp merged commit f73ce92 into production Jan 16, 2025
14 checks passed
@maxvp maxvp deleted the max/gw/byoip-locations branch January 16, 2025 22:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants