Cloudflare WAN, Magic Transit, Cloudflare One - BGP route filtering for IPsec and GRE tunnels
- Announced
- Tags
- Cloudflare-WAN, Magic-Transit, Cloudflare-One
- Severity
- info, set by
reef/rss-rule-v1 - Source
- https://developers.cloudflare.com/changelog/post/2026-10-15-bgp-filter-profiles/
<p>Cloudflare WAN and Magic Transit IPsec and GRE tunnels now support BGP import and export filtering.</p> <p>Create reusable filter profiles that specify an <code>allow</code> or <code>deny</code> action and a list of Classless Inter-Domain Routing (CIDR) targets with exact, more-specific, or prefix-length matching. Each tunnel supports one import filter and one export filter.</p> <p>You can create and assign profiles through the dashboard, API, or Terraform. Profile changes apply without resetting the BGP session.</p> <p>For configuration details, refer to:</p> <ul> <li><a href="https://developers.cloudflare.com/cloudflare-wan/configuration/how-to/configure-routes/#filter-bgp-routes">Filter BGP routes for Cloudflare WAN</a></li> <li><a href="https://developers.cloudflare.com/magic-transit/how-to/configure-routes/#filter-bgp-routes">Filter BGP routes for Magic Transit</a></li> </ul>
The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.