You can forward and traffic to Gateway for logging and filtering. Gateway can proxy both outbound traffic and traffic directed to resources connected via a Cloudflare Tunnel, GRE tunnel, or IPsec tunnel.
The Gateway proxy is required for filtering HTTP and network traffic via the WARP client in Gateway with WARP mode. To proxy HTTP traffic without deploying the WARP client, you can configure on your devices.
Gateway supports proxying TCP, UDP, and ICMP traffic.
When the proxy is enabled, Gateway will always forward TCP traffic.
By default, TCP connection attempts will timeout after 30 seconds and idle connections will disconnect after 8 hours.
The ICMP proxy forwards traffic for diagnostic tools such as