cloudflare · 7michele7 · Sep 17, 2026
@@ -31,7 +31,7 @@ import {
 
 <Plan type="enterprise" />
 
-Manage DNS records that should only be accessible within your private network—useful when you need internal systems (like `database.internal` or `api.corp`) to resolve differently for employees versus the public internet. Internal DNS [zones](/dns/internal-dns/internal-zones/) and [views](/dns/internal-dns/dns-views/) pair up with [Gateway resolver policies](/cloudflare-one/traffic-policies/resolver-policies/) so that you can control how a DNS query should be responded to according to query context, such as query source IP.
+Manage DNS records that should only be accessible within your private network—useful when you need internal systems (like `database.internal` or `api.corp`) to resolve differently for employees versus the public internet. Internal DNS [zones](/dns/internal-dns/internal-zones/) and [views](/dns/internal-dns/dns-views/) pair up with [Gateway resolver policies](/cloudflare-one/traffic-controls/resolver-policies/) so that you can control how a DNS query should be responded to according to query context, such as query source IP.
 
 **When you'd use this:** Organizations with multiple offices or regions often need the same hostname to resolve to different IP addresses depending on where the query originates—for example, `intranet.company.com` pointing to London servers for London users and San Francisco servers for SF users.
 
@@ -171,7 +171,7 @@ For detailed step-by-step setup instructions, see the [Get started guide](/dns/i
 
 <RelatedProduct
 	header="Cloudflare Gateway"
-	href="/cloudflare-one/traffic-policies/"
+	href="/cloudflare-one/traffic-controls/"
 	product="privacy-gateway"
 >
 	Set up policies to inspect DNS, Network, HTTP, and Egress traffic.

@@ -307,7 +307,7 @@ package.json @cloudflare/content-engineering
 /src/content/docs/cloudflare-one/team-and-resources/devices/ @cf-rhett @csujedihy @jiulingz @lpraneis @tojens-ietf @cloudflare/cf1-reviewers @cloudflare/product-owners
 /src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/set-up.mdx @asamborski @cf-rhett @csujedihy @jiulingz @lpraneis @tojens-ietf @cloudflare/cf1-reviewers @cloudflare/product-owners
 /src/content/docs/cloudflare-one/team-and-resources/users/ @asamborski @cloudflare/cf1-reviewers @cloudflare/product-owners
-/src/content/docs/cloudflare-one/traffic-policies/ @alexmoraru7 @asamborski @cloudflare/cf1-reviewers @cloudflare/product-owners
+/src/content/docs/cloudflare-one/traffic-controls/ @alexmoraru7 @asamborski @cloudflare/cf1-reviewers @cloudflare/product-owners
 /src/content/partials/cloudflare-one/ @cloudflare/cf1-reviewers @cloudflare/product-owners
 /src/content/partials/cloudflare-one/access/ @asamborski @kennyj42 @cloudflare/cf1-reviewers @cloudflare/product-owners
 /src/content/partials/cloudflare-one/choose-team-name.mdx @asamborski @cloudflare/cf1-reviewers @cloudflare/product-owners

@@ -1449,11 +1449,11 @@
 # CF1 changelog page
 /cloudflare-one/changelog/magic-firewall/ /cloudflare-one/changelog/cloudflare-network-firewall/ 301
 # CF1 MSP page moved under tiered-policies
-/cloudflare-one/traffic-policies/managed-service-providers/ /cloudflare-one/traffic-policies/tiered-policies/tenant-api/ 301
+/cloudflare-one/traffic-policies/managed-service-providers/ /cloudflare-one/traffic-controls/tiered-policies/tenant-api/ 301
 # CF1 package protection renamed to package registry security
-/cloudflare-one/traffic-policies/http-policies/package-protection/ /cloudflare-one/traffic-policies/http-policies/package-registry-security/ 301
+/cloudflare-one/traffic-policies/http-policies/package-protection/ /cloudflare-one/traffic-controls/http-policies/package-registry-security/ 301
 # CF1 packet filtering overview rename
-/cloudflare-one/traffic-policies/packet-filtering/magic-firewall-overview/ /cloudflare-one/traffic-policies/packet-filtering/network-firewall-overview/ 301
+/cloudflare-one/traffic-policies/packet-filtering/magic-firewall-overview/ /cloudflare-one/traffic-controls/packet-filtering/network-firewall-overview/ 301
 # CF1 Audit SSH retired
 /cloudflare-one/traffic-policies/network-policies/ssh-logging/ /cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access/ 301
 # cross-product magic-firewall slug renames
@@ -2688,10 +2688,10 @@
 /cloudflare-one/applications/configure-apps/saas-apps/salesforce-saas/ /cloudflare-one/applications/configure-apps/saas-apps/salesforce-saas-saml/ 301
 /cloudflare-one/connections/connect-apps/routing-to-tunnel/kubernetes/ /cloudflare-one/connections/connect-networks/deploy-tunnels/deployment-guides/kubernetes/ 301
 /cloudflare-one/connections/connect-apps/configuration/ports-and-ips/ /cloudflare-one/connections/connect-networks/configure-tunnels/tunnel-with-firewall/ 301
-/cloudflare-one/team-and-resources/devices/agentless/pac-files/ /cloudflare-one/networks/resolvers-and-proxies/proxy-endpoints/ 301
-/cloudflare-one/connections/connect-devices/agentless/dns-over-https/ /cloudflare-one/networks/resolvers-and-proxies/dns/dns-over-https/ 301
+/cloudflare-one/team-and-resources/devices/agentless/pac-files/ /cloudflare-one/traffic-controls/proxy-endpoints/ 301
+/cloudflare-one/connections/connect-devices/agentless/dns-over-https/ /cloudflare-one/traffic-controls/resolver-endpoints/dns-over-https/ 301
 /cloudflare-one/policies/gateway/dns-policies/scheduled-dns-policies/ /cloudflare-one/policies/gateway/timed-policies/#scheduled-policies 301
-/cloudflare-one/connections/connect-devices/agentless/dns-over-tls/ /cloudflare-one/networks/resolvers-and-proxies/dns/dns-over-tls/ 301
+/cloudflare-one/connections/connect-devices/agentless/dns-over-tls/ /cloudflare-one/traffic-controls/resolver-endpoints/dns-over-tls/ 301
 /cloudflare-one/connections/connect-devices/warp/control-proxy/ /cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/settings/ 301
 /cloudflare-one/policies/filtering/dns-policies/dns-categories/ /cloudflare-one/policies/gateway/domain-categories/ 301
 /cloudflare-one/identity/devices/access-integrations/azure-ad/ /cloudflare-one/tutorials/azuread-conditional-access/ 301
@@ -2728,7 +2728,7 @@
 /cloudflare-one/tutorials/block-football-users/ /cloudflare-one/policies/gateway/http-policies/common-policies/#check-user-identity 301
 /cloudflare-one/tutorials/review-gateway-block/ /cloudflare-one/insights/logs/dashboard-logs/gateway-logs/ 301
 /cloudflare-one/tutorials/many-cfd-one-tunnel/ /cloudflare-one/connections/connect-networks/deployment-guides/kubernetes/ 301
-/cloudflare-one/tutorials/secure-dns-devices/ /cloudflare-one/traffic-policies/get-started/dns/ 301
+/cloudflare-one/tutorials/secure-dns-devices/ /cloudflare-one/traffic-controls/get-started/dns/ 301
 /cloudflare-one/tutorials/migrate-lb-tunnel/ /cloudflare-one/connections/connect-networks/ 301
 /cloudflare-one/tutorials/credentials-only/ /cloudflare-one/connections/connect-networks/get-started/ 301
 /cloudflare-one/tutorials/user-diagnostics/ /cloudflare-one/access-controls/access-settings/app-launcher/ 301
@@ -2786,8 +2786,8 @@
 /cloudflare-one/connections/connect-devices/warp/user-side-certificates/install-cert-with-warp/ /cloudflare-one/team-and-resources/devices/user-side-certificates/automated-deployment/ 301
 /cloudflare-one/connections/connect-apps/configuration/config/ /cloudflare-one/networks/connectors/cloudflare-tunnel/configure-tunnels/run-parameters/ 301
 /cloudflare-one/connections/connect-devices/warp/install-cloudflare-cert/ /cloudflare-one/team-and-resources/devices/user-side-certificates/automated-deployment/ 301
-/cloudflare-one/traffic-policies/packet-filtering/add-rules/ /cloudflare-one/traffic-policies/packet-filtering/add-policies/ 301
-/cloudflare-one/traffic-policies/packet-filtering/create-rate-limiting-rules/ /cloudflare-one/traffic-policies/packet-filtering/create-rate-limiting-policies/ 301
+/cloudflare-one/traffic-policies/packet-filtering/add-rules/ /cloudflare-one/traffic-controls/packet-filtering/add-policies/ 301
+/cloudflare-one/traffic-policies/packet-filtering/create-rate-limiting-rules/ /cloudflare-one/traffic-controls/packet-filtering/create-rate-limiting-policies/ 301
 /cloudflare-one/connections/connect-networks/locations/configuring-a-location/ /cloudflare-one/team-and-resources/devices/agentless/dns/locations/ 301
 /cloudflare-one/identity/authorization-cookie/cors/ /cloudflare-one/access-controls/applications/http-apps/authorization-cookie/cors/ 301
 /cloudflare-one/identity/devices/access-integrations/mutual-tls-authentication/ /cloudflare-one/access-controls/service-credentials/mutual-tls-authentication/ 301
@@ -2801,15 +2801,15 @@
 /cloudflare-one/data-loss-prevention/saas-apps-dlp/ /cloudflare-one/cloud-and-saas-findings/casb-dlp/ 301
 /cloudflare-one/policies/data-loss-prevention/exact-data-match/ /cloudflare-one/data-loss-prevention/detection-entries/#exact-data-match 301
 /cloudflare-one/policies/filtering/configuring-block-page/ /cloudflare-one/reusable-components/custom-pages/gateway-block-page/ 301
-/cloudflare-one/policies/filtering/dns-policies/safesearch/ /cloudflare-one/traffic-policies/dns-policies/#safe-search 301
+/cloudflare-one/policies/filtering/dns-policies/safesearch/ /cloudflare-one/traffic-controls/dns-policies/#safe-search 301
 /cloudflare-one/policies/gateway/block-page/ /cloudflare-one/reusable-components/custom-pages/gateway-block-page/ 301
 /cloudflare-one/policies/lists/ /cloudflare-one/reusable-components/lists/ 301
 /cloudflare-one/technical-limitations/ /cloudflare-one/account-limits/ 301
-/cloudflare-one/tutorials/secure-dns-network/ /cloudflare-one/traffic-policies/get-started/dns/ 301
-/cloudflare-one/traffic-policies/initial-setup/ /cloudflare-one/traffic-policies/get-started/ 301
-/cloudflare-one/traffic-policies/initial-setup/dns/ /cloudflare-one/traffic-policies/get-started/dns/ 301
-/cloudflare-one/traffic-policies/initial-setup/http/ /cloudflare-one/traffic-policies/get-started/http/ 301
-/cloudflare-one/traffic-policies/initial-setup/network/ /cloudflare-one/traffic-policies/get-started/network/ 301
+/cloudflare-one/tutorials/secure-dns-network/ /cloudflare-one/traffic-controls/get-started/dns/ 301
+/cloudflare-one/traffic-policies/initial-setup/ /cloudflare-one/traffic-controls/get-started/ 301
+/cloudflare-one/traffic-policies/initial-setup/dns/ /cloudflare-one/traffic-controls/get-started/dns/ 301
+/cloudflare-one/traffic-policies/initial-setup/http/ /cloudflare-one/traffic-controls/get-started/http/ 301
+/cloudflare-one/traffic-policies/initial-setup/network/ /cloudflare-one/traffic-controls/get-started/network/ 301
 
 # More specific redirects from nav revamp (before catch-alls)
 /cloudflare-one/identity/devices/access-integrations/tanium/ /cloudflare-one/reusable-components/posture-checks/client-checks/tanium/ 301
@@ -2832,7 +2832,7 @@
 /cloudflare-one/identity/mutual-tls-authentication/ /cloudflare-one/access-controls/service-credentials/mutual-tls-authentication/ 301
 /cloudflare-one/identity/service-tokens/ /cloudflare-one/access-controls/service-credentials/service-tokens/ 301
 /cloudflare-one/identity/one-time-pin/ /cloudflare-one/integrations/identity-providers/one-time-pin/ 301
-/cloudflare-one/traffic-policies/ids/ /cloudflare-one/traffic-policies/enable-ids/ 301
+/cloudflare-one/traffic-policies/ids/ /cloudflare-one/traffic-controls/enable-ids/ 301
 
 # Catch-all redirects (must come last)
 /cloudflare-one/faq/troubleshooting/ /cloudflare-one/troubleshooting/ 301
@@ -2848,9 +2848,20 @@
 /cloudflare-one/insights/logs/use-logpush-with-ids/ /cloudflare-one/insights/logs/logpush/ids-logs/ 301
 /cloudflare-one/insights/logs/filter-views/ /cloudflare-one/insights/logs/logpush/network-firewall-log-filters/ 301
 /cloudflare-one/remote-browser-isolation/canvas-rendering/ /cloudflare-one/remote-browser-isolation/canvas-remoting/ 301
+/cloudflare-one/networks/resolvers-and-proxies/ /cloudflare-one/traffic-controls/ 301
+/cloudflare-one/networks/resolvers-and-proxies/dns/ /cloudflare-one/traffic-controls/resolver-endpoints/ 301
+/cloudflare-one/networks/resolvers-and-proxies/dns/locations/ /cloudflare-one/traffic-controls/resolver-endpoints/ 301
+/cloudflare-one/networks/resolvers-and-proxies/dns/locations/dns-resolver-ips/ /cloudflare-one/traffic-controls/resolver-endpoints/dns-resolver-ips/ 301
+/cloudflare-one/networks/resolvers-and-proxies/dns/dns-over-tls/ /cloudflare-one/traffic-controls/resolver-endpoints/dns-over-tls/ 301
+/cloudflare-one/networks/resolvers-and-proxies/dns/dns-over-https/ /cloudflare-one/traffic-controls/resolver-endpoints/dns-over-https/ 301
+/cloudflare-one/networks/resolvers-and-proxies/proxy-endpoints/ /cloudflare-one/traffic-controls/proxy-endpoints/ 301
+/cloudflare-one/networks/resolvers-and-proxies/proxy-endpoints/configure-pac-file-on-device/ /cloudflare-one/traffic-controls/proxy-endpoints/configure-pac-file-on-device/ 301
+/cloudflare-one/networks/resolvers-and-proxies/proxy-endpoints/best-practices/ /cloudflare-one/traffic-controls/proxy-endpoints/best-practices/ 301
+/cloudflare-one/traffic-policies/ /cloudflare-one/traffic-controls/ 301
 
 # ============================================================================
 # DYNAMIC REDIRECTS
+/cloudflare-one/traffic-policies/* /cloudflare-one/traffic-controls/:splat 301
 /agents/think/* /agents/harnesses/think/:splat 301
 # ============================================================================
 
@@ -2965,7 +2976,7 @@
 /cloudflare-one/policies/access/* /cloudflare-one/access-controls/policies/:splat 301
 /cloudflare-one/policies/browser-isolation/* /cloudflare-one/remote-browser-isolation/:splat 301
 /cloudflare-one/policies/data-loss-prevention/* /cloudflare-one/data-loss-prevention/:splat 301
-/cloudflare-one/policies/gateway/* /cloudflare-one/traffic-policies/:splat 301
+/cloudflare-one/policies/gateway/* /cloudflare-one/traffic-controls/:splat 301
 /cloudflare-one/team-and-resources/devices/agentless/dns/* /cloudflare-one/networks/resolvers-and-proxies/dns/:splat 301
 /cloudflare-one/api-terraform/access-api-examples/* /api/resources/zero_trust/subresources/access/subresources/policies/ 301
 

@@ -44,7 +44,7 @@ import Icon from "@cloudflare/nimbus-docs/components/Icon.astro";
 					<span class="node-icon gateway-icon" aria-hidden="true">
 						<Icon name="gateway" />
 					</span>
-					<a class="node-title" href="/cloudflare-one/traffic-policies/">
+					<a class="node-title" href="/cloudflare-one/traffic-controls/">
 						Cloudflare Gateway
 					</a>
 				</div>

@@ -39,7 +39,7 @@ import Icon from "@cloudflare/nimbus-docs/components/Icon.astro";
 					<span class="node-icon gateway-icon" aria-hidden="true">
 						<Icon name="gateway" />
 					</span>
-					<a class="node-title" href="/cloudflare-one/traffic-policies/">
+					<a class="node-title" href="/cloudflare-one/traffic-controls/">
 						Cloudflare Gateway
 					</a>
 				</div>

@@ -44,7 +44,7 @@ import Icon from "@cloudflare/nimbus-docs/components/Icon.astro";
 					<span class="node-icon gateway-icon" aria-hidden="true">
 						<Icon name="gateway" />
 					</span>
-					<a class="node-title" href="/cloudflare-one/traffic-policies/">
+					<a class="node-title" href="/cloudflare-one/traffic-controls/">
 						Cloudflare Gateway
 					</a>
 				</div>

@@ -2,11 +2,11 @@
 import Icon from "@cloudflare/nimbus-docs/components/Icon.astro";
 
 const policies = [
-	{ label: "DNS", href: "/cloudflare-one/traffic-policies/dns-policies/" },
-	{ label: "HTTP", href: "/cloudflare-one/traffic-policies/http-policies/" },
+	{ label: "DNS", href: "/cloudflare-one/traffic-controls/dns-policies/" },
+	{ label: "HTTP", href: "/cloudflare-one/traffic-controls/http-policies/" },
 	{
 		label: "Network",
-		href: "/cloudflare-one/traffic-policies/network-policies/",
+		href: "/cloudflare-one/traffic-controls/network-policies/",
 	},
 ];
 
@@ -75,7 +75,7 @@ const logsHref = "/cloudflare-one/insights/logs/dashboard-logs/gateway-logs/";
 					<span class="node-icon gateway-icon" aria-hidden="true">
 						<Icon name="gateway" />
 					</span>
-					<a class="node-title" href="/cloudflare-one/traffic-policies/">
+					<a class="node-title" href="/cloudflare-one/traffic-controls/">
 						Cloudflare Gateway
 					</a>
 				</div>

@@ -2,11 +2,11 @@
 import Icon from "@cloudflare/nimbus-docs/components/Icon.astro";
 
 const policies = [
-	{ label: "DNS", href: "/cloudflare-one/traffic-policies/dns-policies/" },
-	{ label: "HTTP", href: "/cloudflare-one/traffic-policies/http-policies/" },
+	{ label: "DNS", href: "/cloudflare-one/traffic-controls/dns-policies/" },
+	{ label: "HTTP", href: "/cloudflare-one/traffic-controls/http-policies/" },
 	{
 		label: "Network",
-		href: "/cloudflare-one/traffic-policies/network-policies/",
+		href: "/cloudflare-one/traffic-controls/network-policies/",
 	},
 ];
 
@@ -98,7 +98,7 @@ const logsHref = "/cloudflare-one/insights/logs/dashboard-logs/gateway-logs/";
 					<span class="node-icon gateway-icon" aria-hidden="true">
 						<Icon name="gateway" />
 					</span>
-					<a class="node-title" href="/cloudflare-one/traffic-policies/">
+					<a class="node-title" href="/cloudflare-one/traffic-controls/">
 						Cloudflare Gateway
 					</a>
 				</div>

@@ -60,7 +60,7 @@ const categories = [
 			{
 				scenario: "Secure Internet browsing without disruptions",
 				product: "Gateway",
-				href: "/cloudflare-one/traffic-policies/",
+				href: "/cloudflare-one/traffic-controls/",
 				icon: "gateway",
 				detail:
 					"Cloud-native Secure Web Gateway (SWG) that inspects browser traffic without disruption.",

@@ -161,7 +161,7 @@ export const sidebarSections: SidebarSection[] = [
 					link("Team & Resources", "/cloudflare-one/team-and-resources/"),
 					link("Networks", "/cloudflare-one/networks/"),
 					link("Access controls", "/cloudflare-one/access-controls/"),
-					link("Traffic policies", "/cloudflare-one/traffic-policies/"),
+					link("Traffic controls", "/cloudflare-one/traffic-controls/"),
 					link(
 						"Cloud & SaaS findings",
 						"/cloudflare-one/cloud-and-saas-findings/",

@@ -6,6 +6,6 @@ products:
   - access
 ---
 
-Cloudflare [admin activity logs](/cloudflare-one/insights/logs/) now capture each time a [DNS over HTTP (DoH) user](/cloudflare-one/networks/resolvers-and-proxies/dns/dns-over-https/) is created.
+Cloudflare [admin activity logs](/cloudflare-one/insights/logs/) now capture each time a [DNS over HTTP (DoH) user](/cloudflare-one/traffic-controls/resolver-endpoints/dns-over-https/) is created.
 
 These logs can be viewed from the [Cloudflare One dashboard](https://one.dash.cloudflare.com/), pulled via the [Cloudflare API](/api/), and exported through [Logpush](/cloudflare-one/insights/logs/logpush/).
@@ -6,9 +6,9 @@ products:
   - access
 ---
 
-[MCP server portals](/cloudflare-one/access-controls/ai-controls/mcp-portals/) can now route traffic through [Cloudflare Gateway](/cloudflare-one/traffic-policies/) for richer HTTP request logging and data loss prevention (DLP) scanning.
+[MCP server portals](/cloudflare-one/access-controls/ai-controls/mcp-portals/) can now route traffic through [Cloudflare Gateway](/cloudflare-one/traffic-controls/) for richer HTTP request logging and data loss prevention (DLP) scanning.
 
-When Gateway routing is turned on, portal traffic appears in your [Gateway HTTP logs](/cloudflare-one/insights/logs/dashboard-logs/gateway-logs/). You can create [Gateway HTTP policies](/cloudflare-one/traffic-policies/) with [DLP profiles](/cloudflare-one/data-loss-prevention/dlp-profiles/) to detect and block sensitive data sent to upstream MCP servers.
+When Gateway routing is turned on, portal traffic appears in your [Gateway HTTP logs](/cloudflare-one/insights/logs/dashboard-logs/gateway-logs/). You can create [Gateway HTTP policies](/cloudflare-one/traffic-controls/) with [DLP profiles](/cloudflare-one/data-loss-prevention/dlp-profiles/) to detect and block sensitive data sent to upstream MCP servers.
 
 :::note
 DLP [AI prompt profiles](/cloudflare-one/data-loss-prevention/dlp-profiles/predefined-profiles/#ai-prompt) do not apply to MCP server portal traffic.