Check tunnel health in the dashboard

The Cloudflare dashboard monitors the health of all anycast tunnels on your account that route traffic from Cloudflare to your origin network.

The dashboard shows the global view of tunnel health as measured from all Cloudflare locations. If the tunnels are healthy on your side, you will see the majority of servers reporting an up status. It is normal for a subset of these locations to show tunnel status as degraded or unhealthy, since the Internet is not homogeneous and intermediary path issues between Cloudflare and your network can cause interruptions for specific paths.

Note

To access more than one hour of tunnel health data, you should use the GraphQL API.

Not all data centers are relevant to you at all times. You can refer to the Average ingress traffic (last hour) column to understand if a given data center is receiving traffic for your network, and if its health status is relevant to you.

Note

The steps below cover both the old and new dashboard experiences. To switch dashboard experiences, use the banner at the top of the dashboard.

Check tunnel health

Old dashboard

1. Log in to the Cloudflare dashboard and select your account.
2. Go to Magic Transit > Network health.
3. In Cloudflare colos, you can choose one or more Cloudflare data centers to filter out the traffic that shows up in your anycast tunnels. For example, if you chose the Lisbon data center, your anycast tunnels would only show connections to that data center.
4. You have a list of all your anycast tunnels, as well as their current health status. Find the tunnel you want to inspect and select the arrow (>) before it to open its details.
5. The details pane shows the connection status between different Cloudflare servers and your tunnel. Select Traceroute for details in one of the Cloudflare servers shown to check for issues between Cloudflare and your origin network.

New dashboard

1. Log in to the Cloudflare dashboard and select your account.
2. Go to Magic Transit > Network health.
3. In this screen you can access a list of your tunnels and their current health status. You can also check the amount of health checks passed in the last hour as well as traffic volume for each tunnel.
4. Find the tunnel you want to inspect, select the three dots next to it, and select:
   • Create alert: Opens the notifications wizard so you can create specific alerts for that tunnel when specific conditions are met.
   • Network Analytics: Opens the Analytics section of the dash, prefiltered with the tunnel you want to inspect.
5. Alternatively, from the list of tunnels, select the tunnel you want to inspect to access details about it.

Check tunnel health for a specific tunnel

You can drill down into a specific tunnel to check its health status and other information. To switch dashboard experiences, use the banner at the top of the dashboard.

1. Go to Magic Transit > Network health.
2. Find and select the tunnel you want to inspect.

The next screen shows you detailed information about the tunnel, including:

• Status information
  • Up: More than 80% of health checks pass.
  • Degraded: More than 40% of health checks pass.
  • Down: Less than 40% of health checks pass.
• Health checks passed in the last hour
• Traffic volume in the last hour

If you select the three dots in front of the tunnel you want to inspect, you have access to the following tools:

• Packet captures: Collect packet level data for your traffic
• Network Analytics: Leverage real-time visibility into network analytics.

Note

Magic Transit customers with Customer Metadata Boundary enabled for the European Union can access GRE, IPsec, and CNI (Cloudflare Network Interconnect) health check and traffic volume data in the Cloudflare dashboard and through the API. This ensures that customers who need to be General Data Protection Regulation (GDPR) compliant can access all Magic Transit features.