Skip to content

Commit 2757170

Browse files
Apply suggestions from code review
Co-authored-by: Jun Lee <[email protected]>
1 parent 2b8571b commit 2757170

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

src/content/partials/magic-transit/tunnel-health/tunnel-health-checks.mdx

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -10,17 +10,17 @@ params:
1010

1111
import { Render } from "~/components";
1212

13-
A tunnel health check probe consists of an [ICMP (Internet Control Message Protocol)](https://www.cloudflare.com/learning/ddos/glossary/internet-control-message-protocol-icmp/) payload encapsulated in the protocol of the tunnel the probe is being conducted for. For example, if the tunnel is an IPsec tunnel the ICMP packet is encrypted within the Encapsulating Security Payload (ESP) packet of the tunnel.
13+
A tunnel health check probe consists of an [ICMP (Internet Control Message Protocol)](https://www.cloudflare.com/learning/ddos/glossary/internet-control-message-protocol-icmp/) payload encapsulated in the protocol of the tunnel the probe is being conducted for. For example, if the tunnel is an IPsec tunnel, the ICMP packet is encrypted within the Encapsulating Security Payload (ESP) packet of the tunnel.
1414

15-
A tunnel health check probe comes from Cloudflare to the tunnel origin and a response then returns to Cloudflare. This response is used to determine the outcome of the probe and then used to calculate the state of the tunnel (this is explained in greater detail below).
15+
A tunnel health check probe comes from Cloudflare to the tunnel origin, then returns a response to Cloudflare. This response is used to determine the outcome of the probe, which is used to calculate the state of the tunnel (this is explained in greater detail below).
1616

1717
## Tunnel health check attributes
1818

1919
A tunnel health check probe has important attributes described below.
2020

2121
### Target
2222

23-
A tunnel health check probe tests whether Cloudflare can successfully connect to a specific address or endpoint via the tunnel. The target is the address you want to ensure is reachable through the tunnel. This helps verify that the tunnel is functional and traffic can flow properly to the intended destination. It is optional and there are certain defaults depending on the direction of the health check (refer to [Direction](#direction) for more information).
23+
A tunnel health check probe tests whether Cloudflare can successfully connect to a specific address or endpoint via the tunnel. The target is the address you want to ensure is reachable through the tunnel. This helps verify that the tunnel is functional and traffic can flow properly to the intended destination. It is optional, and there are certain defaults depending on the direction of the health check (refer to [Direction](#direction) for more information).
2424

2525
### Direction
2626

@@ -30,13 +30,13 @@ A tunnel health check probe can have two possible directions — unidirectional
3030

3131
A unidirectional health check probe stays encapsulated in one direction and comes into the origin via the tunnel (from Cloudflare to the origin). The response comes back to Cloudflare unencapsulated and is routed outside of the tunnel following standard Internet routing.
3232

33-
The target defaults to the publicly routable origin specified as the `customer_endpoint` on the tunnel if present. Otherwise, you can use a custom target.
33+
The target defaults to the publicly routable origin specified as the `customer_endpoint` on the tunnel, if present. Otherwise, you can use a custom target.
3434

3535
#### Bidirectional
3636

3737
A bidirectional probe stays encapsulated in both directions, that is, the probe comes in via the tunnel and the response also leaves encapsulated via the tunnel.
3838

39-
These packets are by default destined for the Cloudflare side of the interface address field set on the tunnel, and are sourced from the client of the tunnel. For example, if the interface address is `10.100.0.8/31`, then the packet will be destined for `10.100.0.9` and sourced from `10.100.0.8`.
39+
By default, these packets are destined for the Cloudflare side of the interface address field set on the tunnel, and are sourced from the client of the tunnel. For example, if the interface address is `10.100.0.8/31`, then the packet will be destined for `10.100.0.9` and sourced from `10.100.0.8`.
4040

4141
Note that the interface address field is always a `/30` or `/31` CIDR range. In the case of a `/31` range, the IP provided will be the Cloudflare side, whereas the other will be the client side. For example, if the interface address is `10.100.0.8/31`, `10.100.0.8` is the Cloudflare side, and `10.100.0.9` is the client side. In the case of a `/30` range, the IP provided will be the Cloudflare side whereas the other IP (excluding the broadcast and network identifier) will be the client side. For example, if the interface address is `10.100.0.9/30`, `10.100.0.9` will be the Cloudflare side and `10.100.0.10` will be the client side.
4242

@@ -55,23 +55,23 @@ For customers using the legacy health check system with a public IP range, Cloud
5555

5656
### Type
5757

58-
A tunnel health check probe can have two possible types: request and reply. For each type the source and destination address depends on the direction. Refer to <a href={props.addTunnels}>Add tunnels</a> to learn how to change this setting.
58+
A tunnel health check probe can have two possible types: request and reply. For each type, the source and destination address depends on the direction. Refer to <a href={props.addTunnels}>Add tunnels</a> to learn how to change this setting.
5959

6060
#### Request style
6161

6262
In a request style health check the payload probe is an ICMP request.
6363

64-
For a unidirectional probe the source address is the Cloudflare side of the tunnel (a publicly routable address) and the destination is the origin router (also publicly routable). The origin router receives the probe and produces an ICMP response with the opposite source and destination, and sends it outside of the tunnel.
64+
For a unidirectional probe, the source address is the Cloudflare side of the tunnel (a publicly routable address) and the destination is the origin router (also publicly routable). The origin router receives the probe and produces an ICMP response with the opposite source and destination, and sends it outside of the tunnel.
6565

66-
For a bidirectional probe the source address is the interface address of the Cloudflare side of the tunnel (a privately routable address) and the destination is the interface address of the tunnel (also privately routable). The origin router receives the probe and produces an ICMP response with the opposite source and destination and sends it into the tunnel.
66+
For a bidirectional probe, the source address is the interface address of the Cloudflare side of the tunnel (a privately routable address) and the destination is the interface address of the tunnel (also privately routable). The origin router receives the probe and produces an ICMP response with the opposite source and destination and sends it into the tunnel.
6767

6868
#### Reply style
6969

7070
In a reply style health check the payload probe is an ICMP response.
7171

72-
For a unidirectional probe the destination address is the Cloudflare side of the tunnel (a publicly routable address) and the source is the origin router (also publicly routable). The origin router receives the probe and sends it back as the response, unchanged, outside of the tunnel.
72+
For a unidirectional probe, the destination address is the Cloudflare side of the tunnel (a publicly routable address) and the source is the origin router (also publicly routable). The origin router receives the probe and sends it back as the response, unchanged, outside of the tunnel.
7373

74-
For a Bidirectional probe the destination address is the interface address of the Cloudflare side of the tunnel (a privately routable address) and the source is the interface address of the tunnel (also privately routable). The origin router receives the probe packet and sends the probe packet back as the response (unchanged) into the tunnel as the destination is routed via the tunnel.
74+
For a Bidirectional probe, the destination address is the interface address of the Cloudflare side of the tunnel (a privately routable address) and the source is the interface address of the tunnel (also privately routable). The origin router receives the probe packet and sends the probe packet back as the response (unchanged) into the tunnel as the destination is routed via the tunnel.
7575

7676
:::note
7777
To avoid control plane policies enforced by the origin network, tunnel health checks can be set to use a request style health check if reply style health checks are being dropped.

0 commit comments

Comments
 (0)