Cloudflare DNS
Cloudflare DNS runs one of the largest DNS networks in the world.
Assets Types Fetched
This adapter fetches the following types of assets:
- Devices
- Users (when Fetch Users is selected)
- Domains & URLs
- Certificates (when Fetch Certificates is selected)
- Load Balancers (when Fetch Load Balancers is selected)
Before You Begin
Authentication Method
API Key (legacy) or API Token
Required Permissions
- Account Settings Read
- Zone Read
- DNS Read
- SSL and Certifates Read
- Include All accounts
- Include All zones
APIs
The following API endpoints are used:
- accounts -> https://developers.cloudflare.com/api/resources/accounts/
- zones -> https://developers.cloudflare.com/api/resources/zones/
- dns records -> https://developers.cloudflare.com/api/resources/dns/subresources/records/
- custom hostnames -> https://developers.cloudflare.com/api/resources/custom_hostnames/
- rule sets -> https://developers.cloudflare.com/api/resources/rulesets/
Setting Up Cloudflare DNS to Work with Axonius
To create a token, open your Cloudflare account and navigate to Get your API Key -> API Tokens -> Create Token.
Then create the a token with the permissions listed in the image below. Once completed, obtain the generated API Token.
Connecting the Adapter in Axonius
Navigate to the Adapters page, search for Cloudflare DNS, and click on the adapter tile. Click Add Connection.
To connect the adapter in Axonius, provide the following parameters:
Required Parameters
- Cloudflare Domain - Keep as
https://api.cloudflare.com.
- User Email (legacy) - the Email address associated with your Cloudflare account. For more details, see Cloudflare API documentation
- API Key (a legacy authentication method) - Provides full permissions.
- Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
- HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.
To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.
Advanced Settings
Note
Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to Advanced Configuration for Adapters.
- Parse A and AAAA records as devices - By default Axonius also parses A and AAA records as Devices. Use this option to parse them only as Domains and URLs.
- Parse CNAME records as devices - Select whether to fetch each CNAME record as a separate device.
- Fetch Custom Hostnames - Select whether to fetch additional custom hostname information.
- Fetch users - Select whether to fetch users, in addition to devices.
- Fetch Cloudflare WAF Rules - Select this option to fetch WAF rules and associate them to devices based on the Zone they belong to.
- Fetch Certificates - Select this option to fetch certificates.
- Fetch Load Balancers - Select this option to fetch load balancers.
- Fetch Spectrum Applications - Select this option to fetch spectrum applications as Devices.
Note
To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.
Updated about 5 hours ago
