Skip to main content
Not available yet. This skill configures ClientTrafficPolicy, which you can’t create in Datum projects yet. Until you can, don’t use it to change TLS, HTTP version, timeout, or client IP settings.
The Client Traffic skill helps agents manage how Datum Cloud edge gateways accept and handle incoming client connections. It covers Application Load Balancer gateway-level settings — TLS termination, mutual TLS (mTLS), HTTP/2 and HTTP/3 (QUIC), connection timeouts and limits, and real client IP detection — all configured by attaching a ClientTrafficPolicy to a Gateway listener. The skill ships in the datum-networking Claude Code plugin, alongside procedures for diagnosing a load balancer that isn’t serving and for creating networks, using the same diagnosis Datum’s own assistant runs.

​
Install

Installing it also installs the datum-cloud base plugin, which runs Datum MCP. For other agents, copy the skill folder into your agent’s skills directory.
Once installed, the skill activates automatically when you ask an agent to configure client traffic settings on Datum. No further configuration needed.

​
Capabilities

  • Configure TLS termination: minimum/maximum TLS version, cipher suites, ALPN protocols
  • Require and validate client certificates (mutual TLS / mTLS)
  • Enable HTTP/2 and HTTP/3 (QUIC) on gateway listeners
  • Set client-facing connection timeouts and idle timeouts
  • Enforce maximum concurrent connections and per-connection request limits
  • Detect real client IP from X-Forwarded-For headers or proxy protocol
  • Scope policies to a specific listener via sectionName
  • List, inspect, and update policies across a project
  • Preview changes before applying with datumctl diff
  • Delete policies safely
  • Check permissions before acting

​
How it relates to other Datum surfaces

  • Product docs: Application Load Balancer — the human-facing reference for gateways and edge policies
  • Datum MCP: Datum MCP — for agents that need live read/write access to gateway resources during a session
  • datumctl: datumctl overview — get, describe, apply, diff, delete commands the skill teaches agents to use

​
View the full skill

The canonical SKILL.md lives in the datum-networking plugin in the datum-cloud/network-services-operator repo:

On GitHub

Browse the skill source, including frontmatter and full instructions.

Raw SKILL.md

Direct URL for agents that fetch skills by URL.
Last modified on October 30, 2026