Adding Cloudflare Device

Before You Begin

Prerequisites

Prerequisites for Managing Cloudflare devices on AppViewX are:

Version Supported: v4
IP Address/FQDN: NA
User Privilege: Api Token
Note:
When creating a Cloudflare API token for managing load balancing, the following minimum permissions should be granted:Permissions:
1. Zone-level Permissions: Load Balancing: Read/Edit
  This permission allows the token to manage and modify load balancer configurations within specified zones.
2. Account-level Permissions: Load Balancing Pools and Monitors: Read/Edit
  This permission enables the token to manage and modify load balancing pools and health monitors within specified accounts.
Resources:
Account Resource: Include the specific account(s) that should be accessible using this token.
Zone Resource: Include all zones where load balancing management is required.
Enable Password: NA
License Check: No
Services and Ports for AppViewX Communication: Port 443, Outbound Internet access is required to manage the cloudflare
Internet Access/Proxy if Required: Required
Location from which Certificates are discovered if managed: NA

Web Browser Requirement

ACF Permission

Ensure the following ACF permission is available to add and manage devices:

You can check this under any of the following menus:

To associate ACF permissions with a role, see Platform User Guide.

To add a Cloudflare device:

Go to (Menu) > CERT+ > ADMINISTRATION > Device Management.
By default, the ADC tab is displayed.
Click the (Add) icon.
In the Device details page, select Cloudflare from the left sidebar.

Enter the field information in the General information section.

Table 1. General information Section - Field and Description Table
Name	Description
*Device name	Unique name of the device to be added. Note: Device names can only contain alphanumeric characters, '-' , '_' , '.' , '*' , '\|' , '!' and spaces.
Access Url	Access URL of Cloudflare.
*Account Id	Account ID of Cloudflare.
Data center	Datacenter name where the device is configured. The default value is Absecon. Note: Data center name can only contain alphanumeric characters, '-' , '_' , '.' , '*' , ':' , '\|' and spaces.
Onboarding Group	Select the onboarding group to assign the device. Note: Devices without an assigned group are automatically mapped to the Default group during migration, onboarding, and when edited without existing group mappings.
LB Sync	By default, this option is enabled to discover and manage the load balancer configurations. If not required, you can disable this option.
*: Mandatory fields

Enter the field information in the Credentials section.

Table 2. Credentials Section - Field and Description Table
Name	Description
*Credential type	Manual entry: The user should enter the API token.
*Api Token	API token. Required token permissions are: Zone Level: Load Balancing Account Level: Load Balancing Pool and Monitors
*: Mandatory fields

After adding the device, you can validate the device by searching device in the device inventory.