Clouder for Cloudflare

IP Access Rules Block, challenge or allow traffic by IP address, IP range, country or ASN, without leaving your phone. Rules are listed per zone with a filter by action and a search across values and notes, and every entry shows what it matches and what happens to it. Creating a rule validates the address, range, country code or ASN as you type, so a typo never reaches Cloudflare. Custom WAF Rules Write your own firewall rules from the WAF screen. Pick an action, describe what to match in plain language and let Clouder generate the expression, or write it yourself with the built in field and operator reference. Rules can be edited, switched on and off, and deleted. Cloudflare's managed rulesets can now be switched on or off for each zone too. Cache, Origin and Configuration Rules Three new editors on each zone. Cache rules decide what gets cached and for how long, with separate edge and browser settings. Origin rules route matching requests to a different host, port or SNI. Configuration rules override zone settings such as security level, SSL mode, Rocket Loader and email obfuscation for requests you choose. Settings you do not set are left exactly as the zone has them. Speed and Network Settings Turn Brotli, Rocket Loader, HTTP/3, IPv6, WebSockets and Always Online on or off, set how long browsers keep your files, and choose the security level, not just Under Attack mode. Settings your plan cannot change are marked as such. Worker Routes See which URL patterns run which Worker on each domain, and add, edit or remove routes. A route without a Worker lets you exclude a path from a broader one. Health Checks See whether your origin servers are answering and why a check is failing. Create HTTP, HTTPS and TCP checks, and pause, edit or delete them. Health checks need a Cloudflare Pro plan or higher. Protect Tunnels with Access Swipe a tunnel's public hostname to put it behind Cloudflare Access and choose who may open it, by email address or by whole domain. Protected hostnames carry a lock badge. Audit Log See who changed what on your account, grouped by day and searchable by person, action or zone. Open any entry for the full picture, including the exact values before and after the change, ready to copy. DNS Analytics Follow the DNS queries Cloudflare answers for a zone over six hours, a day or a week. See the total, a timeline, and your top query names, query types and response codes. Zone Files Export a zone as a standard BIND file to read, copy or share, and import one to add records in bulk. Imported records can be proxied on arrival, and anything that already exists is reported rather than duplicated. Delete From Your Phone Remove empty R2 buckets, load balancers, origin pools and whole domains. Deleting a domain asks you to type its name first, so it never happens by accident. Your Credentials Stay on Your Device Your Cloudflare tokens and your own OpenAI key now live in the iOS Keychain, pinned to this device, so they never sync to iCloud or restore onto another device from a backup. If you paste your Global API Key or an Origin CA key where a token belongs, Clouder tells you what you pasted. Token Permissions The new features appear in the token permissions checklist, so you can see at a glance whether your token reaches them and add what is missing. Fixes and Refinements Switching a rate limiting rule on or off now works. It previously failed every time, and the rule kept its old state. Editing a rate limiting rule also keeps the counting settings it already had instead of resetting them. Switching rules on and off inside a WAF ruleset works too. Turning Under Attack mode off in Clouder returns the zone to the security level it had before you turned it on, instead of always setting it to high. Long TXT values such as DKIM keys wrap while you edit them.