Merge branch 'production' into macos-bigsur-need-manual-trust

public/_redirects

@@ -1611,6 +1611,10 @@
 /cloudflare-one/analytics/gateway/ /cloudflare-one/insights/analytics/gateway/ 301
 /cloudflare-one/analytics/users/ /cloudflare-one/insights/logs/users/ 301
 /cloudflare-one/api-terraform/access-api-examples/azure-group/ /cloudflare-one/api-terraform/access-api-examples/entra-group/ 301
+/cloudflare-one/api-terraform/gateway-api-examples/ /cloudflare-one/policies/gateway/ 301
+/cloudflare-one/api-terraform/gateway-api-examples/dns-policy/ /cloudflare-one/policies/gateway/dns-policies/common-policies/ 301
+/cloudflare-one/api-terraform/gateway-api-examples/network-policy/ /cloudflare-one/policies/gateway/network-policies/common-policies/ 301
+/cloudflare-one/api-terraform/gateway-api-examples/http-policy/ /cloudflare-one/policies/gateway/http-policies/common-policies/ 301
 /cloudflare-one/applications/non-http/arbitrary-tcp/ /cloudflare-one/applications/non-http/cloudflared-authentication/arbitrary-tcp/ 301
 /cloudflare-one/connections/connect-apps/configuration/ /cloudflare-one/connections/connect-networks/configure-tunnels/ 301
 /cloudflare-one/connections/connect-apps/install-and-setup/setup/ /cloudflare-one/connections/connect-networks/get-started/ 301

src/content/changelogs/ai-gateway.yaml

@@ -5,12 +5,17 @@ productLink: "/ai-gateway/"
 productArea: Developer platform
 productAreaLink: /workers/platform/changelog/platform/
 entries:
+  - publish_date: "2024-12-17"
+    title: AI Gateway Dashboard
+    description: |-
+      * Updated dashboard to view performance, costs, and stats across all gateways.
+
   - publish_date: "2024-12-13"
     title: Bug Fixes
     description: |-
       * **Bug Fixes**: Fixed Anthropic errors being cached.
       * **Bug Fixes**: Fixed `env.AI.run()` requests using authenticated gateways returning authentication error.
-      
+
   - publish_date: "2024-11-28"
     title: OpenRouter
     description: |-

src/content/changelogs/warp.yaml

@@ -5,6 +5,186 @@ productLink: "/cloudflare-one/connections/connect-devices/warp/"
 productArea: Cloudflare One
 productAreaLink: /cloudflare-one/changelog/
 entries:
+  - publish_date: "2024-12-19"
+    title: Cloudflare One Agent for iOS (version 1.8)
+    description: |-
+      A new GA release for the iOS Cloudflare One Agent is now available in the [iOS App Store](https://apps.apple.com/us/app/cloudflare-one-agent/id6443476492). This release includes support for an exciting new capability, [per-app VPN](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/partners/intune/#per-app-vpn-for-ios). This release also includes fixes and minor improvements.
+
+      Changes and improvements:
+        - Added support for per-app VPN configuration.
+        - Fixed issue where some users could not connect unless they rotated their keys after an update.
+        - Fixed a potential crash when connecting to the tunnel.
+
+  - publish_date: "2024-12-19"
+    title: Cloudflare One Agent for Android (version 2.3)
+    description: |-
+      A new GA release for the Android Cloudflare One Agent is now available in the [Google Play Store](https://play.google.com/store/apps/details?id=com.cloudflare.cloudflareoneagent). This release includes support for an exciting new capability, [per-app VPN](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/partners/intune/#per-app-vpn-for-android). This release also includes fixes and minor improvements.
+
+      Changes and improvements:
+        - Added support for per-app VPN configuration.
+        - Fixed an issue where the WARP tunnel is connected immediately when **Auto connect** is greater than 0.
+        - Fixed an issue where rapidly changing service modes resulted in a crash.
+
+  - publish_date: "2024-12-19"
+    title: WARP client for Linux (version 2024.12.554.0)
+    description: |-
+      A new GA release for the Linux WARP client is now available in the [package repository](https://pkg.cloudflareclient.com/). This release includes fixes and minor improvements.
+
+      Changes and improvements:
+        - Consumers can now set the tunnel protocol using `warp-cli tunnel protocol set <protocol>`.
+        - Extended diagnostics collection time in `warp-diag` to ensure logs are captured reliably.
+        - Improved captive portal support by disabling the firewall during captive portal login flows.
+        - Improved reliability of connection establishment logic under degraded network conditions.
+        - Improved reconnection speed when a Cloudflare server is in a degraded state.
+        - Improved captive portal detection on certain public networks.
+        - Reduced connectivity interruptions on WireGuard Split Tunnel Include mode configurations.
+        - Fixed connectivity issues switching between managed network profiles with different configured protocols.
+        - QLogs are now disabled by default and can be enabled with `warp-cli debug qlog enable`. The QLog setting from previous releases will no longer be respected.
+
+  - publish_date: "2024-12-19"
+    title: WARP client for Windows (version 2024.12.554.0)
+    description: |-
+      A new GA release for the Windows WARP client is now available in the [App Center](https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release). This release contains improvements to support custom Gateway certificate installation in addition to the changes and improvements included in version 2024.12.492.0.
+
+      Changes and improvements:
+        - Adds support for installing all available custom Gateway certificates from an account to the system store.
+        - Users can now get a list of installed certificates by running `warp-cli certs`.
+
+      Known issues:
+        - DNS resolution may be broken when all of the following conditions are true:
+          - WARP is in Secure Web Gateway without DNS filtering (tunnel-only) mode.
+          - A custom DNS server address is configured on the primary network adapter.
+          - The custom DNS server address on the primary network adapter is changed while WARP is connected.
+
+          To work around the DNS issue, reconnect the WARP client by toggling off and back on.
+  - publish_date: "2024-12-19"
+    title: WARP client for macOS (version 2024.12.554.0)
+    description: |-
+      A new GA release for the macOS WARP client is now available in the [App Center](https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-macos-1/distribution_groups/release). This release contains improvements to support custom Gateway certificate installation in addition to the changes and improvements included in version 2024.12.492.0.
+
+      Note: If using macOS Sequoia, Cloudflare recommends the use of macOS 15.2 or later. With macOS 15.2, Apple addressed several issues that may have caused the WARP client to not behave as expected when used with macOS 15.0 and 15.1.
+
+      Changes and improvements:
+        - Adds support for installing all available custom Gateway certificates from an account to the system store.
+        - Users can now get a list of installed certificates by running `warp-cli certs`.
+
+      Known issues:
+        - macOS Sequoia: Due to changes Apple introduced in macOS 15.0.x, the WARP client may not behave as expected. Cloudflare recommends the use of macOS 15.2 or later.
+  - publish_date: "2024-12-18"
+    title: WARP client for macOS (version 2024.12.492.0)
+    description: |-
+      A new GA release for the macOS WARP client is now available in the [App Center](https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-macos-1/distribution_groups/release). This release contains minor fixes and improvements.
+
+      Note: If using macOS Sequoia, Cloudflare recommends the use of macOS 15.2 or later. With macOS 15.2, Apple addressed several issues that may have caused the WARP client to not behave as expected when used with macOS 15.0 and 15.1.
+
+      Changes and improvements:
+        - Consumers can now set the tunnel protocol using `warp-cli tunnel protocol set <protocol>`.
+        - Extended diagnostics collection time in `warp-diag` to ensure logs are captured reliably.
+        - Improved captive portal support by disabling the firewall during captive portal login flows.
+        - Improved reliability of connection establishment logic under degraded network conditions.
+        - Improved reconnection speed when a Cloudflare server is in a degraded state.
+        - Improved captive portal detection on certain public networks.
+        - Fixed an issue where admin override displayed an incorrect override end time.
+        - Reduced connectivity interruptions on WireGuard Split Tunnel Include mode configurations.
+        - Fixed connectivity issues switching between managed network profiles with different configured protocols.
+        - QLogs are now disabled by default and can be enabled with `warp-cli debug qlog enable`. The QLog setting from previous releases will no longer be respected.
+
+      Known issues:
+        - macOS Sequoia: Due to changes Apple introduced in macOS 15.0.x, the WARP client may not behave as expected. Cloudflare recommends the use of macOS 15.2 or later.
+
+  - publish_date: "2024-12-18"
+    title: WARP client for Windows (version 2024.12.492.0)
+    description: |-
+      A new GA release for the Windows WARP client is now available in the [App Center](https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release). This release contains minor fixes and improvements.
+
+      Changes and improvements:
+        - Consumers can now set the tunnel protocol using `warp-cli tunnel protocol set <protocol>`.
+        - Extended diagnostics collection time in `warp-diag` to ensure logs are captured reliably.
+        - Improved captive portal support by disabling the firewall during captive portal login flows.
+        - Improved captive portal detection on certain public networks.
+        - Improved reconnection speed when a Cloudflare server is in a degraded state.
+        - Fixed an issue where WARP may fail to remove certificates from the user store in Device Information Only mode.
+        - Ensured at most one Powershell instance is opened when fetching the device serial number for posture checks.
+        - Fixed an issue to prevent the daemon from following Windows junctions created by non-admin users that could be used to delete files as SYSTEM user and potentially gain SYSTEM user privileges.
+        - Improved reliability of connection establishment logic under degraded network conditions.
+        - Fixed an issue that caused high memory usage when viewing connection statistics for extended periods of time.
+        - Improved WARP connectivity in environments with virtual interfaces from VirtualBox, VMware, and similar tools.
+        - Reduced connectivity interruptions on WireGuard Split Tunnel Include mode configurations.
+        - Fixed connectivity issues switching between managed network profiles with different configured protocols.
+        - QLogs are now disabled by default and can be enabled with `warp-cli debug qlog enable`. The QLog setting from previous releases will no longer be respected.
+
+      Known issues:
+        - DNS resolution may be broken when all of the following conditions are true:
+          - WARP is in Secure Web Gateway without DNS filtering (tunnel-only) mode.
+          - A custom DNS server address is configured on the primary network adapter.
+          - The custom DNS server address on the primary network adapter is changed while WARP is connected.
+
+          To work around the DNS issue, reconnect the WARP client by toggling off and back on.
+
+  - publish_date: "2024-12-13"
+    title: WARP client for Windows (version 2024.12.326.1)
+    description: |-
+      A new beta release for the Windows WARP client is now available in the [App Center](https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release/beta). This release includes an exciting new capability, WARP support for [multiple users on a shared Windows device](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/windows-multiuser/). The release also contains minor fixes and improvements.
+
+      Changes and improvements:
+        - Fixed connectivity issues switching between managed network profiles with different configured protocols.
+        - Added support for multiple users on shared Windows 10 and Windows 11 devices. Once a user completes the Windows login, all traffic to Cloudflare will be attributed to the currently active Windows user account. Contact your Customer Success Manager to request participation in this beta.
+
+      Known issues:
+        - DNS resolution may be broken when all of the following conditions are true:
+          - WARP is in Secure Web Gateway without DNS filtering (tunnel-only) mode.
+          - A custom DNS server address is configured on the primary network adapter.
+          - The custom DNS server address on the primary network adapter is changed while WARP is connected.
+
+          To work around the DNS issue, reconnect the WARP client by toggling off and back on.
+
+  - publish_date: "2024-12-05"
+    title: WARP client for Windows (version 2024.11.688.1)
+    description: |-
+      A new beta release for the Windows WARP client is now available in the [App Center](https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release/beta). This release contains minor fixes and improvements.
+
+      Changes and improvements:
+        - Consumers can now set the tunnel protocol using `warp-cli tunnel protocol set <protocol>`.
+        - Extended diagnostics collection time in `warp-diag` to ensure logs are captured reliably.
+        - Improved captive portal support by disabling the firewall during captive portal login flows.
+        - Improved captive portal detection on certain public networks.
+        - Improved reconnection speed when a Cloudflare server is in a degraded state.
+        - Fixed an issue where WARP may fail to remove certificates from the user store in Device Information Only mode.
+        - Ensured at most one Powershell instance is opened when fetching the device serial number for posture checks.
+        - Fixed an issue to prevent the daemon from following Windows junctions created by non-admin users that could be used to delete files as SYSTEM user and potentially gain SYSTEM user privileges.
+        - Improved reliability of connection establishment logic under degraded network conditions.
+        - Fixed an issue that caused high memory usage when viewing connection statistics for extended periods of time.
+        - Improved WARP connectivity in environments with virtual interfaces from VirtualBox, VMware, and similar tools.
+        - Reduced connectivity interruptions on WireGuard Split Tunnel Include mode configurations.
+
+      Known issues:
+        - DNS resolution may be broken when all of the following conditions are true:
+          - WARP is in Secure Web Gateway without DNS filtering (tunnel-only) mode.
+          - A custom DNS server address is configured on the primary network adapter.
+          - The custom DNS server address on the primary network adapter is changed while WARP is connected.
+
+          To work around the DNS issue, reconnect the WARP client by toggling off and back on.
+
+  - publish_date: "2024-12-05"
+    title: WARP client for macOS (version 2024.11.688.1)
+    description: |-
+      A new beta release for the macOS WARP client is now available in the [App Center](https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-macos-1/distribution_groups/release/beta). This release contains minor fixes and improvements.
+
+      Note: If using macOS Sequoia, Cloudflare recommends the use of macOS 15.1 or later. With macOS 15.1, Apple addressed several issues that may have caused the WARP client to not behave as expected when used with macOS 15.0.x.
+
+      Changes and improvements:
+        - Consumers can now set the tunnel protocol using `warp-cli tunnel protocol set <protocol>`.
+        - Extended diagnostics collection time in `warp-diag` to ensure logs are captured reliably.
+        - Improved captive portal support by disabling the firewall during captive portal login flows.
+        - Improved reliability of connection establishment logic under degraded network conditions.
+        - Improved reconnection speed when a Cloudflare server is in a degraded state.
+        - Improved captive portal detection on certain public networks.
+        - Fixed an issue where admin override displayed an incorrect override end time.
+        - Reduced connectivity interruptions on WireGuard Split Tunnel Include mode configurations.
+
+      Known issues:
+        - macOS Sequoia: Due to changes Apple introduced in macOS 15.0.x, the WARP client may not behave as expected. Cloudflare recommends the use of macOS 15.1 or later.
+
   - publish_date: "2024-12-04"
     title: Custom device posture integration
     description: |-

src/content/docs/ai-gateway/reference/limits.mdx

@@ -9,19 +9,20 @@ import { Render } from "~/components";
 
 The following limits apply to gateway configurations, logs, and related features in Cloudflare's platform.
 
-| Feature                                                         | Limit                               |
-| --------------------------------------------------------------- | ----------------------------------- |
-| Cacheable request size                                          | 25 MB per request                   |
-| Custom metadata                                                 | 5 entries per request               |
-| Datasets                                                        | 10 per gateway                      |
-| Gateways                                                        | 10 per account                      |
-| Gateway name length                                             | 64 characters                       |
-| Log storage rate limit                                          | 500 logs per second per gateway     |
-| Logs stored [paid plan](/ai-gateway/reference/pricing/)         | 10 million per gateway <sup>1</sup> |
-| Logs stored [free plan](/ai-gateway/reference/pricing/)         | 100,000 per account <sup>2</sup>    |
-| Log size stored                                                 | 10 MB per log <sup>3</sup>          |
-| Logpush jobs                                                    | 4 per account                       |
-| Logpush size limit                                              | 1MB per log 	                      |
+| Feature                                                          | Limit                               |
+| ---------------------------------------------------------------- | ----------------------------------- |
+| [Cacheable request size](/ai-gateway/configuration/caching/)     | 25 MB per request                   |
+| [Cache TTL](/ai-gateway/configuration/caching/#cache-ttl-cf-aig-cache-ttl)     | 1 month               |
+| [Custom metadata](/ai-gateway/configuration/custom-metadata/)    | 5 entries per request               |
+| [Datasets](/ai-gateway/evaluations/set-up-evaluations/)          | 10 per gateway                      |
+| Gateways                                                         | 10 per account                      |
+| Gateway name length                                              | 64 characters                       |
+| Log storage rate limit                                           | 500 logs per second per gateway     |
+| Logs stored [paid plan](/ai-gateway/reference/pricing/)          | 10 million per gateway <sup>1</sup> |
+| Logs stored [free plan](/ai-gateway/reference/pricing/)          | 100,000 per account <sup>2</sup>    |
+| [Log size stored](/ai-gateway/observability/logging/)            | 10 MB per log <sup>3</sup>          |
+| [Logpush jobs](/ai-gateway/observability/logging/logpush/)       | 4 per account                       |
+| [Logpush size limit](/ai-gateway/observability/logging/logpush/) | 1MB per log                         |
 
 <sup>1</sup> If you have reached 10 million logs stored per gateway, new logs
 will stop being saved. To continue saving logs, you must delete older logs in