API · SDK · runtime · authentication lifecycle intelligence

Last updated · 9 September 2026

SchemaTrace

Breaking changes, enforcement dates and migration requirements.

ST-2026-107 · Removals & lifecycle enforcement

Cloudflare removes Gateway Audit SSH rules

Cloudflare completed the phased retirement of Gateway's Audit SSH network-policy action on 15 July 2026, when all remaining audit_ssh rules stopped working; SSH with Access for Infrastructure is the replacement.

CloudflareGatewayAudit SSHZero Trustnetwork policiesAccess for Infrastructureremovallifecycle

Previous state

Existing Gateway network policies with action audit_ssh continued to audit SSH traffic after Cloudflare had disabled creation in the dashboard and API or Terraform and later disabled editing; those remaining rules still operated until the final removal date.

Current state

Since 15 July 2026, all remaining Gateway Audit SSH rules have stopped working. Cloudflare directs customers to SSH with Access for Infrastructure for managing and auditing SSH access.

Who needs to care

Cloudflare Zero Trust accounts with Gateway network-policy rules whose action is audit_ssh, including teams relying on those rules for SSH access visibility and audit records.

What to do

Inventory any remaining audit_ssh network-policy rules, replace their SSH access and auditing workflow with Access for Infrastructure, and verify that the replacement provides the required access controls and session visibility.

What the source does not prove

The retirement applies to the Gateway Audit SSH action in network policies. Cloudflare's notice does not establish removal of other Gateway actions or a general SSH-service shutdown.

Lifecycle history

Dated event sequence

  1. API and Terraform creation disabled

    Creating new audit_ssh rules through the API and Terraform was disabled.

  2. Editing disabled

    Editing existing Audit SSH rules through the dashboard, API and Terraform was disabled.

  3. Remaining rules stopped working

    Cloudflare fully removed the Gateway Audit SSH action and directed customers to SSH with Access for Infrastructure.

Evidence ledger

First-party sources

  1. 01
    Cloudflare — Cloudflare API deprecations — Gateway Audit SSH rules

    Official Cloudflare API deprecation notice · 2026-05-13

    Open official source ↗