News
What happened
Cloudflare has launched the Cloudflare One stack, a comprehensive library of agent skills designed to streamline the deployment and management of Zero Trust environments. This toolkit aims to ease the daunting task of migrating to a Zero Trust architecture by automating key processes and providing essential context for security practitioners.
The Cloudflare One stack is a collection of skills that enhances AI agents' capabilities to configure, deploy, and manage Zero Trust environments effectively. Built from extensive customer interaction, this toolkit simplifies the complexities of transitioning to Cloudflare's security solutions. It includes features for planning, managing, and troubleshooting deployments, along with migration guidance from legacy vendors like Zscaler and Palo Alto Networks. The stack is designed to be user-friendly, allowing organizations to leverage existing security products more effectively.
Release at a glance
Key facts from the announcement.
Product
Cloudflare One stack
Released
Available now
Skills
cloudflare-one, cloudflare-one-migration
Platform
Cloudflare Skills repository
REMOTE ACCESS
Protect Your Admin Sessions
A zero-exposure architecture secures your server. A VPN secures you — encrypting your connection when managing infrastructure from untrusted networks, coffee shops, or travel. NordVPN is what we use for this layer.
Try NordVPN →This is an affiliate link. If you purchase, I earn a commission at no extra cost to you.
Changes at a glance
What's new
The Cloudflare One stack introduces a set of skills that empower agents to automate the planning, deployment, and management of Zero Trust environments. It includes tools for network diagram interpretation, vendor concept translation, and troubleshooting operations, making it easier for organizations to transition to Cloudflare's security solutions.
Additionally, the stack offers explicit migration guidance for moving from legacy vendors, significantly reducing the time and complexity involved in such transitions.
Breaking changes
No breaking changes were reported in the source material.
Analysis
In detail
The Cloudflare One stack consists of two lightweight skill files: cloudflare-one and cloudflare-one-migration. These skills provide comprehensive support for migrating to and managing Cloudflare One deployments, including remote access, user security, and network management. The stack also offers vendor concept translation to facilitate easier evaluation and switching between SASE providers.
Each skill file contains structured knowledge, decision trees, and tool definitions that agents can load automatically based on context. For instance, the cloudflare-one skill assists with replacing VPN infrastructure and generating deployment sequences, while the cloudflare-one-migration skill helps translate application definitions and policies from Zscaler to Cloudflare Access.
The migration logic used in the Cloudflare One stack is the same as that in Cloudflare's existing Descaler and Deskope programs, which have successfully transitioned enterprise customers from Zscaler and Netskope to Cloudflare One in significantly reduced timeframes.
Key takeaways
The most important facts from this update.
Why it matters
The Cloudflare One stack represents a significant advancement in simplifying Zero Trust architecture deployment, making it more accessible for organizations of all sizes. By automating complex processes and providing tailored guidance, it empowers security teams to enhance their infrastructure without extensive manual intervention.
Homelab impact
For homelab operators and self-hosters, the Cloudflare One stack offers a streamlined approach to implementing Zero Trust principles within their environments. The toolkit's automation capabilities can significantly reduce the learning curve associated with deploying Cloudflare's security solutions, allowing users to focus on optimizing their setups rather than grappling with complex configurations.
Moreover, the migration tools included in the stack can assist users transitioning from other SASE vendors, making it easier to integrate Cloudflare's offerings into existing infrastructures. This can lead to improved security postures and operational efficiencies, especially for those managing diverse network environments.
What to do next
Practical steps for operators running self-hosted stacks.
This article summarises reporting from Cloudflare Blog. Visit the original post for release notes, changelogs, and full technical documentation.