Skip to content
Cloudflare Docs

Cloudflare Magic WAN

Improve security and performance for your entire corporate network, reducing cost and operational complexity.

Enterprise-only

Magic WAN provides secure, performant connectivity and routing for your entire corporate network, reducing cost and operational complexity. Magic Firewall integrates smoothly with Magic WAN, enabling you to enforce network firewall policies at Cloudflare's global network, across traffic from any entity within your network.

With Magic WAN, you can securely connect any traffic source - data centers, offices, devices, cloud resources - to Cloudflare's network and configure routing policies to direct traffic where it needs to go, all within one SaaS solution.

Magic WAN supports a variety of on-ramps including any device that supports anycast GRE or IPsec tunnels. To make it easier to onboard your cloud resources, you can use Magic Cloud Networking, which automates creating on-ramps from your cloud networks.

Refer to On-ramps for a full list of supported on-ramps.

Learn how to get started.


Features

Connect your network automatically

Use Magic WAN Connector to automatically connect, steer, and shape any IP traffic.

Connect your network manually

Magic WAN is compatible with a host of third-party devices. If you do not have Magic WAN Connector, start here to learn how to set up Magic WAN manually.

Automatic cloud on-ramps

Automate resource discovery, and reduce management burden when connecting to your public cloud.

Zero Trust integration

Learn how you can use Magic WAN with other Cloudflare Zero Trust products.

BGP peering

Use BGP (Border Gateway Protocol) peering between your networks and Cloudflare to automate adding or removing networks and subnets, and take advantage of failure detection and session recovery features.


Cloudflare Zero Trust Cloudflare Zero Trust replaces legacy security perimeters with our global edge, making the Internet faster and safer for teams around the world.
Magic Firewall

Magic Firewall is a firewall-as-a-service (FWaaS) delivered from the Cloudflare global network to protect office networks and cloud infrastructure with advanced, and scalable protection.

Magic Cloud Networking Simplify and automate cloud resource discovery, and reduce your management burden when connecting to your public cloud.
Cloudflare Network Interconnect

Cloudflare Network Interconnect (CNI) allows you to connect your network infrastructure directly with Cloudflare - rather than using the public Internet - for a more reliable and secure experience.

Load Balancing

Cloudflare Load Balancing distributes traffic across your endpoints, which reduces endpoint strain and latency and improves the experience for end users.


More resources

Reference Architecture

Deep dive into key architecture and functionalities aspects of Cloudflare One, and learn more about Magic WAN and its structure.