Skip to content
Start here

Locations

List Zero Trust Gateway locations
GET/accounts/{account_id}/gateway/locations
Get Zero Trust Gateway location details
GET/accounts/{account_id}/gateway/locations/{location_id}
Create a Zero Trust Gateway location
POST/accounts/{account_id}/gateway/locations
Update a Zero Trust Gateway location
PUT/accounts/{account_id}/gateway/locations/{location_id}
Delete a Zero Trust Gateway location
DELETE/accounts/{account_id}/gateway/locations/{location_id}
ModelsExpand Collapse
DOHEndpoint object { enabled, networks, require_token }
enabled: optional boolean

Indicate whether the DOH endpoint is enabled for this location.

networks: optional array of IPNetwork { network }

Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location.

network: string

Specify the IP address or IP CIDR.

require_token: optional boolean

Specify whether the DOH endpoint requires user identity authentication.

DOTEndpoint object { enabled, networks }
enabled: optional boolean

Indicate whether the DOT endpoint is enabled for this location.

networks: optional array of IPNetwork { network }

Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location.

network: string

Specify the IP address or IP CIDR.

Endpoint object { doh, dot, ipv4, ipv6 }

Configure the destination endpoints for this location.

doh: DOHEndpoint { enabled, networks, require_token }
dot: DOTEndpoint { enabled, networks }
ipv4: IPV4Endpoint { enabled }
ipv6: IPV6Endpoint { enabled, networks }
IPNetwork object { network }
network: string

Specify the IP address or IP CIDR.

IPV4Endpoint object { enabled }
enabled: optional boolean

Indicate whether the IPv4 endpoint is enabled for this location.

IPV6Endpoint object { enabled, networks }
enabled: optional boolean

Indicate whether the IPV6 endpoint is enabled for this location.

networks: optional array of IPV6Network { network }

Specify the list of allowed source IPv6 network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location.

network: string

Specify the IPv6 address or IPv6 CIDR.

IPV6Network object { network }
network: string

Specify the IPv6 address or IPv6 CIDR.

Location object { id, client_default, created_at, 11 more }
id: optional string
client_default: optional boolean

Indicate whether this location is the default location.

created_at: optional string
formatdate-time
dns_destination_ips_id: optional string

Indicate the identifier of the pair of IPv4 addresses assigned to this location.

dns_destination_ipv6_block_id: optional string

Specify the UUID of the IPv6 block brought to the gateway so that this location’s IPv6 address is allocated from the Bring Your Own IPv6 (BYOIPv6) block rather than the standard Cloudflare IPv6 block.

doh_subdomain: optional string

Specify the DNS over HTTPS domain that receives DNS requests. Gateway automatically generates this value.

ecs_support: optional boolean

Indicate whether the location must resolve EDNS queries.

endpoints: optional Endpoint { doh, dot, ipv4, ipv6 }

Configure the destination endpoints for this location.

ip: optional string

Defines the automatically generated IPv6 destination IP assigned to this location. Gateway counts all DNS requests sent to this IP as requests under this location.

ipv4_destination: optional string

Show the primary destination IPv4 address from the pair identified dns_destination_ips_id. This field read-only.

ipv4_destination_backup: optional string

Show the backup destination IPv4 address from the pair identified dns_destination_ips_id. This field read-only.

name: optional string

Specify the location name.

networks: optional array of object { network }

Specify the list of network ranges from which requests at this location originate. The list takes effect only if it is non-empty and the IPv4 endpoint is enabled for this location.

network: string

Specify the IPv4 address or IPv4 CIDR. Limit IPv4 CIDRs to a maximum of /24.

updated_at: optional string
formatdate-time
LocationDeleteResponse = unknown