@@ -55,32 +55,29 @@ flowchart TD
5555
5656``` mermaid
5757flowchart TD
58- A["WARP user requests resource"] --> B["WARP Client proxies DNS Traffic"]
58+ A["WARP user requests resource"] --> B["WARP client proxies all DNS traffic"]
59+ B -- WARP checks if domain is listed in Local Domain Fallback policies --> C["Local Domain Fallback"]
5960
60- B --> C["WARP checks if domain is listed in Local Domain Fallback (LDF) policies"]
61+ %% Left branch (LDF exists)
62+ C -- Domain exists in Local Domain Fallback policies --> ST["Split Tunnel processing"]
6163
62- C -->|Domain exists in LDF policies| F["Split Tunnel processing "]
63- C -->|Domain does not exist in LDF policies<br/>Sent to Gateway for processing| E["Gateway checks Resolver Policies (Enterprise only) "]
64+ ST -- Resolver IP included in WARP Tunnel per Split Tunnel configuration --> QW["Query sent via WARP Tunnel to be resolved "]
65+ ST -- Resolver IP not included in WARP Tunnel per Split Tunnel configuration --> QO["Query sent to resolver IP outside WARP Tunnel "]
6466
65- %% LDF branch
66- F -->|Resolver IP included in WARP Tunnel per Split Tunnel configuration| G["Query sent via WARP Tunnel to be resolved"]
67- F -->|Resolver IP not included in WARP Tunnel per Split Tunnel configuration| H["Query sent to resolver IP outside WARP Tunnel"]
67+ QW -- Allowed by Gateway --> OR["Evaluated by Cloudflare on-ramp routes"]
68+ OR -- Onramp routes do not include resolver IP --> GP["Gateway proxies query to resolver IP via normal WARP egress route"]
69+ OR -- Onramp routes include, resolver IP --> ADV["Cloudflare onramps advertises route that includes Resolver IP"]
70+ ADV --> PR["Private resolver returns IP address to WARP client"]
6871
69- G -->|Allowed by Gateway| I["Evaluated by Cloudflare on-ramp routes"]
72+ %% Right branch (no LDF match)
73+ C -- Domain does not exist in Local Domain Fallback policies --> GWR["Gateway checks Resolver Policies (Enterprise only)"]
7074
71- I -->|Onramp routes do not include resolver IP| J["Gateway proxies query to resolver IP via normal WARP egress route"]
72- I -->|Onramp routes include resolver IP| K["Cloudflare onramps advertise route that includes Resolver IP"]
73- K --> L["Private resolver returns IP address to WARP client"]
74-
75- %% Gateway resolver policies branch
76- E -->|Resolver policy is not matched| M["1.1.1.1"]
77-
78- E -->|Resolver policy is matched| N["Internal DNS"]
79- E -->|Resolver policy is matched| O["1.1.1.1"]
80- E -->|Resolver policy is matched| P["Custom resolver"]
81-
82- P --> Q["Private network services (Cloudflare Tunnel, Magic WAN, WARP Connector)"]
75+ GWR -- Resolver policy is not matched --> C1111a["1.1.1.1"]
8376
77+ GWR -- Resolver policy is matched --> IDNS["Internal DNS"]
78+ GWR -- Resolver policy is matched --> C1111b["1.1.1.1"]
79+ GWR -- Resolver policy is matched --> CUST["Custom resolver"]
80+ CUST --> PNS["Private network services<br>(Cloudflare Tunnel, Magic WAN, WARP Connector)"]
8481```
8582
8683## Add a DNS suffix
0 commit comments