Sign inConnect your agent
infochanged

Cloudflare WAN, Magic Transit, Cloudflare One - BGP over IPsec and GRE tunnels generally available

Announced
Tags
Cloudflare-WAN, Magic-Transit, Cloudflare-One
Severity
info, set by reef/rss-rule-v1
Source
https://developers.cloudflare.com/changelog/post/2026-10-05-bgp-over-tunnels-ga/

<p>BGP peering over IPsec and GRE tunnels is generally available for Cloudflare WAN and Magic Transit. You can use it for production workloads.</p> <p>BGP peering exchanges routes dynamically between your devices and your Cloudflare virtual network routing table. You no longer need to update static routes manually as your network changes.</p> <p>BGP over IPsec and GRE tunnels is available to all accounts that use <a href="https://developers.cloudflare.com/cloudflare-wan/reference/traffic-steering/#unified-routing">Unified Routing</a>. No enablement is required. BGP over CNI remains in closed beta.</p> <p>For configuration details, refer to:</p> <ul> <li><a href="https://developers.cloudflare.com/cloudflare-wan/configuration/how-to/configure-routes/#configure-bgp-routes">Configure BGP routes for Cloudflare WAN</a></li> <li><a href="https://developers.cloudflare.com/magic-transit/how-to/configure-routes/#configure-bgp-routes">Configure BGP routes for Magic Transit</a></li> </ul>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.