Cloudflare WAN
import { CardGrid, Description, Feature, GlossaryTooltip, LinkTitleCard, Plan, RelatedProduct, Stream, } from "~/components";
Connect and secure your entire corporate network through Cloudflare, replacing MPLS circuits and hub-and-spoke routing with cloud-native networking.Cloudflare WAN (formerly Magic WAN) connects your data centers, offices, and cloud resources through Cloudflare's global network. Instead of backhauling traffic through a central data center or maintaining dedicated MPLS circuits at every site, your traffic routes through the nearest Cloudflare data center where security policies apply inline.
Cloudflare WAN provides secure, performant routing for your entire corporate network. Cloudflare Network Firewall integrates with Cloudflare WAN, enabling you to enforce network firewall policies at Cloudflare's global network, across traffic from any entity within your network.
You connect your sites to Cloudflare through on-ramps — tunnels or direct connections from your network to Cloudflare. Cloudflare WAN supports any device that uses anycast GRE or IPsec tunnels. Refer to On-ramps for a full list of supported on-ramps.
Refer to WAN transformation to compare approaches and plan your migration, or go straight to get started.
Features
<Feature header="Connect your network automatically" href="/cloudflare-one/networks/connectors/cloudflare-wan/configuration/appliance/" cta="Use Cloudflare One Appliance"
Use Cloudflare One Appliance to automatically connect and steer any IP
traffic.
<Feature header="Connect your network manually" href="/cloudflare-one/networks/connectors/cloudflare-wan/configuration/third-party/" cta="Use a third-party device"
Set up Cloudflare WAN with your existing routers and firewalls. If you do
not have Cloudflare One Appliance, start here to configure IPsec or GRE tunnels
from a third-party device.
<Feature header="Zero Trust integration" href="/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/" cta="Integrate with other Zero Trust products"
Learn how you can use Cloudflare WAN with other Cloudflare Zero Trust
products.
Use Border Gateway Protocol (BGP) peering between your networks and Cloudflare
to automatically announce and withdraw routes as your network changes,
rather than managing static routes manually.
<Feature header="WAN transformation" href="/cloudflare-one/networks/connectors/cloudflare-wan/wan-transformation/" cta="Plan your migration"
Replace MPLS circuits and hub-and-spoke routing with cloud-native networking.
Compare WAN approaches and plan an incremental migration.
<Feature header="Virtual networks" href="/cloudflare-one/networks/virtual-networks/" cta="Learn about virtual networks"
Understand how virtual networks provide routing isolation within your
Cloudflare account, keeping traffic separated between environments,
partners, or applications.
Related products
Cloudflare Network Firewall is a firewall-as-a-service (FWaaS) that filters
traffic at layers 3 and 4 across Cloudflare's global network. Included with
Cloudflare WAN.
Cloudflare Network Interconnect (CNI) provides a private, dedicated connection
between your network and Cloudflare instead of routing over the public
Internet. Use CNI when you need lower latency or more consistent performance
than tunnel-based connectivity.
Cloudflare Load Balancing distributes traffic across your endpoints, which
reduces endpoint strain and latency and improves the experience for end users.
More resources
Explore the architecture of Cloudflare One as a SASE platform, including how Cloudflare WAN handles connectivity, routing, and security.
谢谢你的反馈!