Skip to content

Commit 3bb99a2

Browse files
better chart
1 parent f7156af commit 3bb99a2

File tree

1 file changed

+17
-20
lines changed
  • src/content/docs/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic

1 file changed

+17
-20
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/index.mdx

Lines changed: 17 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -55,32 +55,29 @@ flowchart TD
5555

5656
```mermaid
5757
flowchart TD
58-
A["WARP user requests resource"] --> B["WARP Client proxies DNS Traffic"]
58+
A["WARP user requests resource"] --> B["WARP client proxies all DNS traffic"]
59+
B -- WARP checks if domain is listed in Local Domain Fallback policies --> C["Local Domain Fallback"]
5960
60-
B --> C["WARP checks if domain is listed in Local Domain Fallback (LDF) policies"]
61+
%% Left branch (LDF exists)
62+
C -- Domain exists in Local Domain Fallback policies --> ST["Split Tunnel processing"]
6163
62-
C -->|Domain exists in LDF policies| F["Split Tunnel processing"]
63-
C -->|Domain does not exist in LDF policies<br/>Sent to Gateway for processing| E["Gateway checks Resolver Policies (Enterprise only)"]
64+
ST -- Resolver IP included in WARP Tunnel per Split Tunnel configuration --> QW["Query sent via WARP Tunnel to be resolved"]
65+
ST -- Resolver IP not included in WARP Tunnel per Split Tunnel configuration --> QO["Query sent to resolver IP outside WARP Tunnel"]
6466
65-
%% LDF branch
66-
F -->|Resolver IP included in WARP Tunnel per Split Tunnel configuration| G["Query sent via WARP Tunnel to be resolved"]
67-
F -->|Resolver IP not included in WARP Tunnel per Split Tunnel configuration| H["Query sent to resolver IP outside WARP Tunnel"]
67+
QW -- Allowed by Gateway --> OR["Evaluated by Cloudflare on-ramp routes"]
68+
OR -- Onramp routes do not include resolver IP --> GP["Gateway proxies query to resolver IP via normal WARP egress route"]
69+
OR -- Onramp routes include, resolver IP --> ADV["Cloudflare onramps advertises route that includes Resolver IP"]
70+
ADV --> PR["Private resolver returns IP address to WARP client"]
6871
69-
G -->|Allowed by Gateway| I["Evaluated by Cloudflare on-ramp routes"]
72+
%% Right branch (no LDF match)
73+
C -- Domain does not exist in Local Domain Fallback policies --> GWR["Gateway checks Resolver Policies (Enterprise only)"]
7074
71-
I -->|Onramp routes do not include resolver IP| J["Gateway proxies query to resolver IP via normal WARP egress route"]
72-
I -->|Onramp routes include resolver IP| K["Cloudflare onramps advertise route that includes Resolver IP"]
73-
K --> L["Private resolver returns IP address to WARP client"]
74-
75-
%% Gateway resolver policies branch
76-
E -->|Resolver policy is not matched| M["1.1.1.1"]
77-
78-
E -->|Resolver policy is matched| N["Internal DNS"]
79-
E -->|Resolver policy is matched| O["1.1.1.1"]
80-
E -->|Resolver policy is matched| P["Custom resolver"]
81-
82-
P --> Q["Private network services (Cloudflare Tunnel, Magic WAN, WARP Connector)"]
75+
GWR -- Resolver policy is not matched --> C1111a["1.1.1.1"]
8376
77+
GWR -- Resolver policy is matched --> IDNS["Internal DNS"]
78+
GWR -- Resolver policy is matched --> C1111b["1.1.1.1"]
79+
GWR -- Resolver policy is matched --> CUST["Custom resolver"]
80+
CUST --> PNS["Private network services<br>(Cloudflare Tunnel, Magic WAN, WARP Connector)"]
8481
```
8582

8683
## Add a DNS suffix

0 commit comments

Comments
 (0)