Cloudflare

Overview

Firefly can ingest DNS and CDN configurations from Cloudflare. Provide your Cloudflare account email and an API token with read permissions to your zones. Firefly will list DNS records or configurations as part of inventory.

Prerequisites

  • A Cloudflare account with administrative access

  • Ability to generate API tokens

  • Access to Cloudflare API endpoints

  • API token with read permissions to your zones

Setup Procedure

  1. Log in to your Cloudflare account.

  2. Create an API token:

  3. In Firefly:

    • Select Settings > Integrations

    • Select Add New > Cloudflare

    • Enter a descriptive name in the Nickname field

    • Paste the token into the API Token field

    • Select Next

Configuration Details

  • Supports monitoring of:

    • DNS records

    • CDN configurations

    • Zone settings

    • SSL/TLS configurations

  • Regular scanning of Cloudflare assets

  • Integration with Firefly's inventory management

  • Support for policy enforcement on Cloudflare resources

Best Practices

  1. Use a dedicated API token for Firefly integration

  2. Regularly rotate API tokens for security

  3. Monitor API token usage in Cloudflare

  4. Keep track of which Cloudflare assets are being monitored

  5. Review and update policies as needed

  6. Maintain proper access controls in Cloudflare

  7. Ensure API token has minimum required permissions

Troubleshooting

  1. For API token issues:

    • Verify API token permissions

    • Check if the token has expired

    • Ensure the token has the correct access level

    • Verify token has access to required zones

  2. For asset discovery issues:

    • Verify the integration is active in Firefly

    • Check if the API token has access to the required resources

    • Review Firefly integration logs

    • Verify Cloudflare zone configurations

  3. For policy enforcement issues:

    • Verify the asset types are supported

    • Check policy configuration

    • Review Firefly policy logs

    • Ensure Cloudflare resources are properly tagged

Last updated

Was this helpful?