Cloudflare One Bootcamp — London, 28 Sep 2026

Cloudflare Professional Services Bootcamp for Cloudflare One. Place confirmed and approved. Proceed with travel arrangements.

Course overview

Official title: “Partner Services Bootcamp: Cloudflare One”. A five-day instructor-led bootcamp teaching Cloudflare Zero Trust and SASE architecture through lecture, live demonstrations, and hands-on labs completed in chronological build order.

Participants build a working Zero Trust deployment from identity and endpoint configuration through Cloudflare Tunnel, Access, private networking, Gateway filtering, Browser Isolation, DLP, Cloudflare Mesh, WAN architecture, operations, and project delivery. It concludes with an individual end-to-end capstone validated by an automated grader.

Dates and venue

• Dates: week of 28 September 2026 — 5 days (Mon 28 Sep – Fri 2 Oct); starts 08:30 on 28 Sep.
• Format: in-person, instructor-led.
• Venue: Cloudflare London, Riverside Building, 6th Floor, Belvedere Road, London SE1 7PB, United Kingdom.

Logistics

• Calendar invite with final schedule and logistical details to follow.
• Attendance by invitation only, places very limited.
• Must notify contact immediately if unable to attend so the place can be offered to another engineer.

Contact

• Anil Erduran — Partner Solutions & Services
• aerduran@cloudflare.com
• +447825756887

Course structure (from the EPAM/Cloudflare syllabus)

Format: instructor-led (in-person or virtual) — 4 days lecture + labs, 1 full-day capstone. ~100 hands-on exercises across 18 labs, following the “AcmeCorp” build scenario (“trust nothing by default; verify every user and device, every time”). Each student gets a dedicated Cloudflare Enterprise pod: a Windows 11 client + Ubuntu origin (5 Docker services: web, intranet, DNS, FTP, SMB), a dedicated DNS zone + Access org, and a shared SAML IdP. Prerequisites: TCP/IP (DNS/HTTP/TLS/routing), basic IdP/SSO/SAML concepts, Windows + Linux CLI comfort; no prior Cloudflare experience required.

• Day 1 — Foundation: identity, endpoints, the client (Modules 1–3; Labs 1–5, 29 exercises).
• Day 2 — Connectivity: tunnels, Access, private networking (Modules 4–5; Labs 6–13, 44 exercises).
• Day 3 — Policy: Gateway filtering, RBI, DLP, DNS (Modules 6–7; Labs 14–17, 24 exercises).
• Day 4 — Architecture: WAN, Mesh, operations, project delivery (Modules 8–10; Lab 18 Cloudflare Mesh).
• Day 5 — Full-day individual capstone: build & defend a complete Zero Trust deployment, checked by an automated grader.

1. What Cloudflare Zero Trust actually does (perimeter model, four use cases, One reference architecture, five SASE categories).
2. Cloudflare One Client architecture & configuration (five modes, Managed Networks, device profiles/split tunnel, MDM/MSI + mdm.xml).
3. Client posture, monitoring & troubleshooting (posture checks, DEX, warp-diag).
4. Cloudflare Tunnel (cloudflared as a proxy, replicas/LB, dashboard+CLI, hostname routing).
5. Cloudflare Access (self-hosted/SaaS/Infrastructure patterns, CF_Authorization JWT/SSO, service tokens, App Launcher, Access for Infrastructure SSH/RDP).
6. Gateway: filtering & inspection (DNS/Network/HTTP layers, TLS decryption + Do-Not-Inspect, RBI, DLP, CASB, AV sandbox).
7. Gateway: DNS, egress & network routing (resolver policies, egress/dedicated IPs, Protective DNS, overlapping-IP/M&A).
8. Cloudflare WAN (formerly Magic WAN), Cloudflare Mesh (formerly WARP Connector) & the off-ramp choice; SCIM ties identity to network.
9. Operations: logs, monitoring & troubleshooting (Gateway logs, Log Explorer, Logpush to R2/SIEM).
10. Delivering a SASE project (six-phase lifecycle, HLD, phased rollout, Terraform/API, RBAC) → sets up the Day-5 capstone.

Lab status

Detailed lab completion status, configuration notes, API state, and what was correct/wrong: cloudflare/lab-status.