Cloudflare Zero Trust の WARP Agent / Agentless 方式の整理

# Agent (WARP あり）

- [WARP modes · Cloudflare Zero Trust docs](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/#device-information-only)

| Cloudflare<br>Zero Trust |                          WARP modes                          | [DNS<br>policies](https://developers.cloudflare.com/cloudflare-one/policies/filtering/dns-policies/) | [HTTP<br>policies](https://developers.cloudflare.com/cloudflare-one/policies/filtering/http-policies/) | [Network<br>policies](https://developers.cloudflare.com/cloudflare-one/policies/filtering/network-policies/) | [Device<br>Posture](https://developers.cloudflare.com/cloudflare-one/identity/devices/) | [Access<br>policies](https://developers.cloudflare.com/cloudflare-one/policies/access/) |
| :----------------------: | :----------------------------------------------------------: | :----------------------------------------------------------: | :----------------------------------------------------------: | :----------------------------------------------------------: | :----------------------------------------------------------: | ------------------------------------------------------------ |
|          Agent           | [Gateway with WARP](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/#gateway-with-warp-default) |                      :white_check_mark:                      |                      :white_check_mark:                      |             :white_check_mark:<br>All TCP / UDP              |                      :white_check_mark:                      | :white_check_mark:                                           |
|          Agent           | [Gateway with DoH](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/#gateway-with-doh) |                      :white_check_mark:                      |                              -                               |                              -                               |                              -                               | :white_check_mark:                                           |
|          Agent           |          [WARP Tunnel Only](#%E5%8F%82%E8%80%83warp-tunnel-only-mode)<br>(SWG without DNS)          |                              -                               |                      :white_check_mark:                      |                      :white_check_mark:<br/>All TCP / UDP                      |                      :white_check_mark:                      | :white_check_mark:                                           |
|          Agent           | [`localhost` Proxy<br>(WARP via Local Proxy)](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/#proxy-mode) |                              -                               |                      :white_check_mark:                      |             :white_check_mark:<br/>All TCP / UDP             |                              -                               | :white_check_mark:                                           |
|          Agent           | [Device Information Only](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/#device-information-only) |                              -                               |                              -                               |                              -                               |                      :white_check_mark:                      | :white_check_mark:                                           |

# Agentless (WARP なし）

- [Agentless options · Cloudflare Zero Trust docs](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/agentless/)

| Cloudflare<br>Zero Trust |                      Agentless Options                       | [DNS<br>policies](https://developers.cloudflare.com/cloudflare-one/policies/filtering/dns-policies/) | [HTTP<br>policies](https://developers.cloudflare.com/cloudflare-one/policies/filtering/http-policies/) | [Network<br>policies](https://developers.cloudflare.com/cloudflare-one/policies/filtering/network-policies/) | [Device<br>Posture](https://developers.cloudflare.com/cloudflare-one/identity/devices/) | [Access<br/>policies](https://developers.cloudflare.com/cloudflare-one/policies/access/) |
| :----------------------: | :----------------------------------------------------------: | :----------------------------------------------------------: | :----------------------------------------------------------: | :----------------------------------------------------------: | :----------------------------------------------------------: | ------------------------------------------------------------ |
|        Agentless         | [Gateway DNS / DoH / DoT](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/agentless/dns/) |                      :white_check_mark:                      |                              -                               |                              -                               |                              -                               | :white_check_mark:                                           |
|        Agentless         | [Proxy Endpoint](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/agentless/pac-files/) |                              -                               |                      :white_check_mark:                      | :white_check_mark:<br/>HTTPS (TCP 443)<br>Proxied Traffic Only |                              -                               | :white_check_mark:                                           |
|        Agentless         | [Magic WAN](https://developers.cloudflare.com/magic-wan/zero-trust/cloudflare-gateway/) |                              -                               |                      :white_check_mark:                      |             :white_check_mark:<br/>All TCP / UDP             |                              -                               | :white_check_mark:                                           |
|        Agentless         | [Arbitrary TCP](https://developers.cloudflare.com/cloudflare-one/applications/non-http/arbitrary-tcp/)<br>(`cloudflared access tcp` ) |                              -                               |                              -                               |                              -                               |                              -                               | :white_check_mark:                                           |

# 参考：WARP Tunnel Only mode

- [Secure Web Gateway without DNS filtering · Cloudflare Zero Trust docs](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/#secure-web-gateway-without-dns-filtering)

- https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-macos/distribution_groups/beta

> ![image-20230616021227305](https://cdn.jsdelivr.net/gh/kyouheicf/image@master/uPic/image-20230616021227305.png)
>
> ![image-20230616021531353](https://cdn.jsdelivr.net/gh/kyouheicf/image@master/uPic/image-20230616021531353.png)
>
> ![image-20230616021413450](https://cdn.jsdelivr.net/gh/kyouheicf/image@master/uPic/image-20230616021413450.png)

# 参考

- [Complete list of github markdown emoji markup](https://gist.github.com/rxaviers/7360908)