IPsec/GRE

1

Overview

Secure Network Tunnels

IPsec and GRE are tunneling protocols that connect your network infrastructure directly to Cloudflare. IPsec offers native encryption, while GRE is simpler and widely supported. Both use Anycast for automatic routing to the nearest PoP.

A Private Highway

Imagine a private highway between your company and Cloudflare. IPsec is like a highway with cameras and guards at every entrance (encryption). GRE is the simpler highway, but still private. Both take you straight to the destination without going through public traffic.

Features

Site-to-cloud connection
Automatic Anycast routing
Instant failover
Compatible with any router
Magic Transit/WAN integration
1/8
YOUR DATACENTER📡Router/FirewallNETWORK INFOBGP AS: 65001203.0.113.0/24INTERNAL SERVERS🖥️ Web🗄️ DB📧 Mail⚙️ AppIPsec TUNNELIKEv2 + AES-256-GCM🔐 EncryptedPrimaryBackupGRE TUNNELLow overhead (24 bytes)📦 EncapsulatedFastSimpleCLOUDFLAREANYCAST IPs162.159.192.x162.159.193.xAuto-routed to nearest PoPMAGIC TRANSITDDoS ProtectionNetwork FirewallMAGIC WANSD-WAN GlobalSite-to-SiteANALYTICS📊 Logs🔔 AlertsAMERICAS🌎São Paulo • NYC • LAXEUROPE🌍London • Frankfurt • ParisASIA-PACIFIC🌏Tokyo • Singapore • SydneyBRANCH OFFICE 1🏢São PauloIPsec TunnelBRANCH OFFICE 2🏢Rio de JaneiroGRE TunnelLEGENDAIPsec (Encrypted)GRE (Fast)Anycast