Description
Cloudflare One migrations is an agent skill for assessing and planning a move from an existing VPN, secure web gateway or SASE platform to Cloudflare One. It covers mapping source policies to Cloudflare objects, identifying parity gaps, and planning the rollout. The skill identifies the source stack first, such as Zscaler ZIA or ZPA, Palo Alto NGFW, Prisma or GlobalProtect, or a legacy VPN, SWG or SD-WAN product. It asks for structured exports and logs before mapping anything, and prefers exports over screenshots or prose summaries. Next it builds an inventory of identities, groups, applications, destinations, connectors and tunnels, and the URL, firewall, DNS, DLP and TLS policies. For each source element it produces a mapping plan with the Cloudflare target, a confidence level, prerequisites, partial or unsupported mappings, and decisions that need a person. It creates dependencies first, such as identity sync, connectors, routes and lists, and then stages the policies in audit mode or disabled, pilots them with small groups, compares logs and expands. Every source rule must end up either mapped to a Cloudflare object or listed as Not Migrated, with a reason and its security impact. The skill retrieves current Cloudflare documentation and API schemas before giving exact configuration. It is published by Cloudflare on skills.sh under the cloudflare skills repository, with about 3.1K stars, and its listing shows Gen Agent Trust Hub: Pass, Socket: Pass and Snyk: Pass.…
Highlights
- Maps policies from VPN, SWG and SASE sources
- Covers Zscaler, Palo Alto and legacy stacks
- Inventory and mapping plan with confidence
- Every rule mapped or explicitly not migrated
- Staged rollout in audit mode and pilots
Ratings & Reviews
No ratings yet
Be the first to rate cloudflare-one-migrations.
People also visit
google-cloud-solution-guided-gke-ai-migration
Guides the migration of existing AI workloads
google-mobile-ads-android-migrate-to-next-gen
Migrates Android applications from the old, legacy Google Mobile Ads (GMA) SDK
managed-airflow-migrations
Provides guidance for migrating Apache Airflow DAGs in Managed Service
cloudflare-one-migrations FAQ
What does the skill plan?
A migration from a VPN, secure web gateway or SASE platform to Cloudflare One, including policy mapping, parity gaps and rollout.
Which source products are covered?
Zscaler ZIA and ZPA, Palo Alto NGFW, Prisma and GlobalProtect, and legacy VPN, SWG and SD-WAN platforms.
What does it ask for first?
Structured exports and logs from the current platform, rather than screenshots or prose summaries.
How are risky rules handled?
New rules are created disabled or in audit mode by default, piloted with small groups and sites, and compared against logs before rollout expands.
How do I install it?
Run npx skills add https://github.com/cloudflare/skills --skill cloudflare-one-migrations.
What security audits has it passed?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best cloudflare-one-migrations alternatives?
Popular alternatives to cloudflare-one-migrations include cloudflare-one, turnstile-spin and google-cloud-solution-guided-gke-ai-migration. See all cloudflare-one-migrations alternatives