Foundations spent a quarter onboarding with Dedicated and understanding how to best provide a WAF through Cloudflare for Dedicated customers. The work resulted in a blueprint, describing how to best implement such a solution in a way that can later be extrapolated for use in Cells and in some services outside of the main GitLab application.

This epic follows up that work and focusing on the delivery of a WAF (Cloudflare) on Dedicated.

To complete this work, there are a few major sections of work:

1. Route all dedicated traffic through Cloudflare.
2. Enable a WAF by vendoring in a module to the Dedicated tooling.
3. Provide monitoring to the Dedicated team and SREs
4. Deliver this solution to all new Dedicated customers.
5. Migrate existing customers onto the WAF in a low-risk manner.

We will work this quarter with the Dedicated team to accomplish this.