Cloudflare WARP Client

Cloudflare WARP Client, now called the Cloudflare One Client in Cloudflare's Zero Trust documentation, is a client that sends an endpoint's traffic to Cloudflare's global network over encrypted connections. It can proxy internet and private network traffic through a WireGuard or MASQUE tunnel. It can also send DNS queries to Cloudflare over an encrypted channel, where Gateway DNS policies can filter them. It reports device health data, such as OS version and disk encryption status, for posture checks.