API Protect: Cloudflare Workers Integration

Step 1: Deploy the Data Theorem Agent In Your Environment

Because API Protect does not send any of your request data to Data Theorem, our API Protect agent needs to be deployed in your environment. We package our agent for deployment as a Kubernetes Service, a Docker Compose service, and a Podman pod. We can also quickly and easily provide different packages on request.

Deploy Agent as Docker Compose Service

Extract the archive

In the directory where the archive has been uncompressed, to start the services of the network traffic analyzer run the following command:

To verify the network traffic analyzer services have started properly run the following command:

If the service has started properly you should see something mostly the same as the following:

Once the agent is deployed, make note of the agent’s HTTPS URL so you can add it to the Cloudflare Worker’s environment as the DATA_THEOREM_SERVICE_URL

Step 2: Add Data Theorem Integration Code to your Cloudflare Workers

Creating and deploying a new Cloudflare Worker on Cloudflare site

Extract the archive

From the data_theorem_forwarder directory, view the contents of the file wrangler.toml and determine your FORWARD_URL

On http://cloudflare.com from the workers page:

1. click 'Create a Service'

2. from the 'Select a starter' panel, choose 'HTTP Router' and click 'Create Service'

3. switch to the 'Setting' tab and click 'Add Variable'

4. create a variable named CLIENT_ID using the value from the CLIENT_ID key in data_theorem_forwarder/wrangler.toml

5. create a second variable named FORWARD_URL using value from the instructions in data_theorem_forwarder/wrangler.toml

6. click 'Save and deploy'

7. click 'Quick edit'

8. replace the contents of the left-most code panel by pasting the contents of data_theorem_forwarder/src/index.js then click 'Save and Deploy'

Creating and deploying a new Cloudflare Worker with Wrangler CLI

Extract the archive

From the data_theorem_forwarder directory

Edit the file wrangler.toml to replace [ANALYZER_DOMAIN] with your domain