DeviceManagedNetwork

Source: src/Cloudflare/Devices/ManagedNetwork.ts

A Cloudflare Zero Trust device managed network — a TLS endpoint the WARP client probes to detect whether the device is on a known network. Device profiles can then match on network to apply different WARP settings on trusted networks.

Name and config are mutable in place (PUT). tls is the only network type Cloudflare supports.

Creating a managed network

Detect the office network by TLS fingerprint

const network = yield* Cloudflare.DeviceManagedNetwork("Office", {
  config: {
    tlsSockaddr: "192.0.2.1:443",
    sha256:
      "b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c",
  },
});

Use the network in a custom device profile

yield* Cloudflare.DeviceCustomProfile("OnPrem", {
  match: `network == "${network.name}"`,
  precedence: 100,
  serviceModeV2: { mode: "proxy", port: 3000 },
});