Hey everyone, I'm trying to wrap my head around the policy setup in Cloudflare One. I've been working on some data pipelines that need to connect securely to our Snowflake instance, and I know I need to set this up correctly... but the docs are kind of making my head spin 😅
I see I can create rules in both "Gateway" and "Access," and they both seem to control what can reach what. Could someone explain like I'm five what the core, practical difference is?
Here's what I *think* I understand, but please correct me:
- **Gateway policies** feel like they're about *traffic inspection and filtering*. Like, blocking certain websites or scanning for malware on the way out to the internet from our office.
- **Access policies** seem to be about *authentication and application protection*. Like, making sure you log in with Google before you can reach our internal dashboard.
But then I get confused because both can involve users, groups, and destinations. If I want to make sure only the ETL servers can talk to our BigQuery project, which one do I use? And why?
A screenshot of my test setup that failed would probably help, but I don't want to accidentally expose anything. Let's just say I tried an Access policy for a private IP and it didn't work as expected 🙃
Really grateful for any clarity you all can provide!
null