Cloudflare DNS Ad Blocking with Terraform
I used Terraform to fetch public domain feeds, turn them into Cloudflare Zero Trust lists and enforce them with a Gateway DNS policy that remains reviewable as code.
Topic
11 matching entries across Articles, TIL and Projects.
Long-form writing tagged DNS.
I used Terraform to fetch public domain feeds, turn them into Cloudflare Zero Trust lists and enforce them with a Gateway DNS policy that remains reviewable as code.
From WSL2 and container health checks to DNS caching and deployment tooling, the practical lessons I learned taking a simple application from source code to a running service.
NO_CLIENT_SITE entries in Netlogon logs are useful evidence that client networks are not mapped cleanly to Active Directory sites. PowerShell can turn the logs into a subnet-hygiene report.
When private sites and DNS exceptions multiply, WARP device-profile configuration becomes data. Source control can become the input and PowerShell the generator.
Static IP and subnet rules become fragile when SaaS platforms and CDNs move underneath you. Domain-aware egress policy aligns network controls with application intent.
Short notes and fixes tagged DNS.
An HTTP data source can retrieve an external domain feed, but the useful pattern is to validate and normalize it before Terraform materializes enforcement objects.
A hostname can continue returning NXDOMAIN after its DNS record exists if another resolver layer has cached the earlier negative response.
The simple 301 redirect pattern I use to keep one canonical hostname for a site.
Cloud and SaaS services move between addresses. Policy often expresses intent more accurately when it follows the application hostname.
DNS resolution and packet routing are related, but a WARP configuration often needs you to reason about them separately.
Projects and implementation patterns tagged DNS.
A Terraform project that consumes remote domain feeds, normalizes them into Cloudflare Zero Trust lists and builds a Gateway DNS blocking policy from the generated data.