Skill · em Publicar e operar

cloudflare-one-migrations

Assess and plan migrations from existing VPN, SWG, or SASE platforms to Cloudflare One, including policy mapping, parity gaps, and rollout.

Procedência

Antes de instalar

1 arquivo · 12 KB · só texto, nenhum script

Instalar na sua CLI

O comando baixa a versão fixada (commit 6dc7604) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.

Claude Code

Neste projeto: instala em .claude/skills/cloudflare-one-migrations/.

d=".claude/skills/cloudflare-one-migrations"
u="https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/skills/cloudflare-one-migrations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/LICENSE"

Global: instala em ~/.claude/skills/cloudflare-one-migrations/.

d="$HOME/.claude/skills/cloudflare-one-migrations"
u="https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/skills/cloudflare-one-migrations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/LICENSE"

Codex

Neste projeto: instala em .agents/skills/cloudflare-one-migrations/.

d=".agents/skills/cloudflare-one-migrations"
u="https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/skills/cloudflare-one-migrations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/LICENSE"

Global: instala em ~/.agents/skills/cloudflare-one-migrations/.

d="$HOME/.agents/skills/cloudflare-one-migrations"
u="https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/skills/cloudflare-one-migrations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/LICENSE"

Antigravity

Neste projeto: instala em .agents/skills/cloudflare-one-migrations/.

d=".agents/skills/cloudflare-one-migrations"
u="https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/skills/cloudflare-one-migrations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/LICENSE"

Global: instala em ~/.gemini/antigravity-cli/skills/cloudflare-one-migrations/.

d="$HOME/.gemini/antigravity-cli/skills/cloudflare-one-migrations"
u="https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/skills/cloudflare-one-migrations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/cloudflare/skills/6dc7604903127485e7e4cb26314651ebd4a4df19/LICENSE"

Peça ao Rook

Já usa o Rook Labs? Cole no chat do Rook: instale a skill https://rooklabs.sh/marketplace/cloudflare.skills.cloudflare-one-migrations

Prévia do SKILL.md

---
name: cloudflare-one-migrations
description: Assess and plan migrations from existing VPN, SWG, or SASE platforms to Cloudflare One, including policy mapping, parity gaps, and rollout.
---

# Cloudflare One Migrations

Retrieve current Cloudflare docs, Cloudflare API schemas, and source-vendor export docs before generating exact configuration.

## Workflow

1. Identify the source stack: Zscaler ZIA, Zscaler ZPA, Palo Alto NGFW/Prisma/GlobalProtect, legacy VPN/SWG/SD-WAN, or other.
2. Request exports and logs before mapping. Prefer structured exports over screenshots or prose summaries.
3. Build an inventory: identities, groups, apps, destinations, connectors/tunnels, DNS/URL/firewall/DLP/TLS policies, objects/lists, locations/sites, exceptions, hit counts, and compliance logging.
4. Produce a mapping plan: source object, Cloudflare One target resource, confidence, prerequisites, unsupported/partial mappings, and manual decisions.
5. Create dependencies first: identity/[SCIM](https://developers.cloudflare.com/cloudflare-one/team-and-resources/users/scim/), connectors/on-ramps, routes/DNS, lists/objects, TLS bypasses, Access apps/policies, Gateway policies, DLP/CASB, logging.
6. Stage safely: use a migration prefix, create disabled/audit-mode rules by default, pilot with small groups/sites, compare logs, then expand rollout.
7. Account for every source rule. Each rule must map to a Cloudflare object or an explicit Not Migrated row with reason and security impact.

## Exports To Ask For

- ZIA: URL filtering, firewall filtering, SSL inspection, DLP, custom URL categories, IP groups, network services/service groups, users/groups/departments, locations, GRE tunnels, and static IPs.
- ZPA: app segments, segment groups, server groups, app connectors/connector groups, access policies, IdP/group mapping, private DNS domains, ports, and protocols.
- Palo Alto/Prisma: security/NAT/decryption rules, address/service objects and groups, URL categories, HIP profiles, GlobalProtect config, Prisma Access remote network/service connection config, zones, tags, logs, and hit counts.

## Mapping Heuristics

- ZIA/SWG policies usually map to [Gateway traffic policies](https://developers.cloudflare.com/cloudflare-one/traffic-policies/) and Gateway lists.
- ZPA private app access usually maps to [Access application types](https://developers.cloudflare.com/cloudflare-one/access-controls/applications/choose-application-type/), [Cloudflare Tunnel](https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/), private network routing/DNS, and [Acc…
…

Ver todo o marketplace