Connect your cloud networks to Cloudflare WAN using Internet Protocol Security (IPsec) tunnels or Cloud Interconnect. Use Border Gateway Protocol (BGP) to exchange routes dynamically, or configure static routes.
Choose a connection based on your network requirements:
| Connection | Transport | Configuration |
|---|---|---|
| IPsec tunnels | Encrypted tunnels over the public Internet | Configure your cloud provider's virtual private network (VPN) gateway and matching Cloudflare WAN tunnels. |
| Cloud Interconnect | Private connectivity through Cloudflare Network Interconnect (CNI) | Connect through your cloud provider's interconnect service. Contact your account team to start provisioning. |
The guides describe specific configurations, not every supported routing option:
| Cloud provider | IPsec configuration | Routing in the guide |
|---|---|---|
| Alibaba Cloud | VPN Gateway | Static routes |
| Amazon Web Services (AWS) | Transit Gateway | BGP with redundant tunnels, including a Terraform reference deployment |
| Google Cloud | Cloud VPN | Static routes with Classic VPN |
| Microsoft Azure | VPN Gateway | Static routes |
| Microsoft Azure | Virtual WAN | Static routes |
| Oracle Cloud | Site-to-Site VPN | Static routes |
For private connectivity, use the following Cloud Interconnect guides:
| Cloud provider | Configuration | Requirements |
|---|---|---|
| AWS | Direct Connect (beta) | Dedicated Direct Connect. Hosted Direct Connect is not supported. |
| Google Cloud | Cloud Interconnect | Follow the routing requirements after provisioning the connection. |
BGP over IPsec requires Unified Routing. Your cloud gateway must initiate the BGP session toward Cloudflare.
BGP over CNI with Dataplane v2 is in closed beta and unavailable to new customers. Refer to Configure BGP for an interconnect for its requirements.
The Google Cloud Interconnect guide uses static routes toward Google Cloud. Cloudflare ignores routes advertised by Google Cloud Router in that configuration.
For configurations that use static routes, refer to Configure static routes.