dotfiles/.agents/skills/cloudflare-deploy/references/spectrum/README.md

Cloudflare Spectrum Skill Reference

Overview

Cloudflare Spectrum provides security and acceleration for ANY TCP or UDP-based application. It's a global Layer 4 (L4) reverse proxy running on Cloudflare's edge nodes that routes MQTT, email, file transfer, version control, games, and more through Cloudflare to mask origins and protect from DDoS attacks.

When to Use Spectrum: When your protocol isn't HTTP/HTTPS (use Cloudflare proxy for HTTP). Spectrum handles everything else: SSH, gaming, databases, MQTT, SMTP, RDP, custom protocols.

Plan Capabilities

Capability	Pro/Business	Enterprise
TCP protocols	Selected ports only	All ports (1-65535)
UDP protocols	Selected ports only	All ports (1-65535)
Port ranges	❌	✅
Argo Smart Routing	✅	✅
IP Firewall	✅	✅
Load balancer origins	✅	✅

Decision Tree

What are you trying to do?

1. Create/manage Spectrum app

   • Via Dashboard → See Cloudflare Dashboard
   • Via API → See api.md - REST endpoints
   • Via SDK → See api.md - TypeScript/Python/Go examples
   • Via IaC → See configuration.md - Terraform/Pulumi

2. Protect specific protocol

   • SSH → See patterns.md
   • Gaming (Minecraft, etc) → See patterns.md
   • MQTT/IoT → See patterns.md
   • SMTP/Email → See patterns.md
   • Database → See patterns.md
   • RDP → See patterns.md

3. Choose origin type

   • Direct IP (single server) → See configuration.md
   • CNAME (hostname) → See configuration.md
   • Load balancer (HA/failover) → See configuration.md

Reading Order

1. Start with patterns.md for your specific protocol
2. Then configuration.md for your origin type
3. Check gotchas.md before going to production
4. Use api.md for programmatic access

See Also

• Cloudflare Docs