You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/cloudflare-one/connections/connect-networks/private-net/warp-connector/site-to-internet.mdx
+4-7Lines changed: 4 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,16 +13,13 @@ This guide covers how to connect a private network to the Internet using WARP Co
13
13
```mermaid
14
14
flowchart LR
15
15
subgraph subnet1[Subnet 10.0.0.0/24]
16
-
router1["WARP Connector
16
+
device1["Device
17
+
10.0.0.2"]-->router1["WARP Connector
17
18
10.0.0.1"]
18
19
end
19
20
router1-->C((Cloudflare))-->I{Internet}
20
21
```
21
22
22
-
:::note
23
-
To connect a private network using `cloudflared`, refer to [Connect private networks](/cloudflare-one/connections/connect-networks/private-net/cloudflared/).
24
-
:::
25
-
26
23
## Prerequisites
27
24
28
25
- A Linux host [^1] on the subnet
@@ -48,7 +45,7 @@ Depending on where you installed the WARP Connector, you may need to configure o
For example, for all traffic from the subnet to egress through WARP Connector, add a rule on the router that routes `0.0.0.0` to the WARP Connector host machine (`10.0.0.100`).
54
51
@@ -58,7 +55,7 @@ For example, for all traffic from the subnet to egress through WARP Connector, a
For example, for devices on subnet `10.0.0.0/24` to reach applications behind subnet `192.168.1.0/24`, add a rule on the router that routes `192.168.1.0/24` to the WARP Connector host machine (`10.0.0.100`).
97
97
@@ -101,13 +101,11 @@ For example, for devices on subnet `10.0.0.0/24` to reach applications behind su
You can configure only certain routes to egress through WARP Connector. For example, you may only want to filter traffic destined to internal applications and devices, but allow public Internet traffic to bypass Cloudflare.
108
+
Alternatively, you can configure only certain routes to egress through WARP Connector. For example, you may only want to filter traffic destined to internal applications and devices, but allow public Internet traffic to bypass Cloudflare.
Copy file name to clipboardExpand all lines: src/content/docs/cloudflare-one/connections/connect-networks/private-net/warp-connector/user-to-site.mdx
+13-12Lines changed: 13 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,16 +13,15 @@ This guide covers how to connect WARP client user devices to a private network b
13
13
```mermaid
14
14
flowchart LR
15
15
subgraph subnet1[Subnet 10.0.0.0/24]
16
+
router1["WARP Connector
17
+
10.0.0.1"]--> device1["Device
18
+
10.0.0.2"]
16
19
router1["WARP Connector
17
20
10.0.0.1"]
18
21
end
19
22
W[WARP clients]-->C((Cloudflare))-->router1
20
23
```
21
24
22
-
:::note
23
-
To connect a private network using `cloudflared`, refer to [Connect private networks](/cloudflare-one/connections/connect-networks/private-net/cloudflared/).
24
-
:::
25
-
26
25
## Prerequisites
27
26
28
27
- A Linux host [^1] on the subnet
@@ -40,8 +39,9 @@ To connect a private network using `cloudflared`, refer to [Connect private netw
40
39
41
40
WARP clients and WARP Connectors are accessed using their <GlossaryTooltipterm="CGNAT IP">CGNAT IP</GlossaryTooltip>. Therefore, CGNAT IP traffic must route through Cloudflare on both the WARP Connector host and WARP client devices.
42
41
43
-
1. In your WARP Connector device profile, delete `100.96.0.0/12` from the [Split Tunnel Exclude list](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/) (or add it to the Split Tunnel Include list).
44
-
2. Repeat the previous step for all WARP client device profiles.
42
+
1. In your WARP Connector device profile, go to [Split Tunnels](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/).
43
+
2. Ensure that `100.96.0.0/12` routes through the WARP tunnel. For example, if you are using **Exclude** mode, delete `100.64.0.0/10` from the list and re-add `100.64.0.0/11` and `100.112.0.0/12`.
44
+
3. Repeat the previous steps for all WARP client device profiles.
45
45
46
46
## 4. Route traffic from subnet to WARP Connector
47
47
@@ -55,7 +55,7 @@ Depending on where you installed the WARP Connector, you may need to configure o
`100.96.0.0/12` is the default CIDR for all user devices running the [WARP client](/cloudflare-one/connections/connect-devices/warp/). On your router, add a rule that routes the destination IP `100.96.0.0/12` to the WARP Connector host machine (`10.0.0.100`).
61
61
@@ -65,7 +65,7 @@ Depending on where you installed the WARP Connector, you may need to configure o
Copy file name to clipboardExpand all lines: src/content/partials/cloudflare-one/tunnel/warp-connector-device-profile.mdx
+7-5Lines changed: 7 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,10 +2,12 @@
2
2
{}
3
3
---
4
4
5
-
A dedicated [device profile](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/) allows you to manage the WARP Connector host machine separately from WARP client user devices.
5
+
A dedicated [device profile](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/) allows you to manage the WARP Connector host machine separately from WARP client user devices. WARP Connector hosts are registered to your Zero Trust organization with the email address `warp_connector@<your-team-name>.cloudflareaccess.com`. To set up a device profile for WARP Connector:
6
6
7
-
WARP Connector hosts are registered to your Zero Trust organization with the email address `warp_connector@<your-team-name>.cloudflareaccess.com`. To set up a device profile for WARP Connector, [create a new profile](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/#create-a-new-profile) that matches on the following expression:
7
+
1.[Create a new profile](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/#create-a-new-profile) that matches on the following expression:
8
8
9
-
| Selector | Operator | Value |
10
-
| -------- | -------- | ----- |
11
-
| User email | is |`warp_connector@<your-team-name>.cloudflareaccess.com`|
9
+
| Selector | Operator | Value |
10
+
| -------- | -------- | ----- |
11
+
| User email | is |`warp_connector@<your-team-name>.cloudflareaccess.com`|
12
+
13
+
2. In the profile settings, ensure that **Service mode** is set to **Gateway with WARP**.
1. In [Zero Trust](https://one.dash.cloudflare.com), go to **Network** > **Tunnels**.
9
+
1. In [Zero Trust](https://one.dash.cloudflare.com), go to **Networks** > **Tunnels**.
10
10
2. Select **Create a tunnel**.
11
11
3. For the tunnel type, select **WARP Connector**.
12
12
4. You will be prompted to turn on **Warp to Warp** and [**Override local interface IP**](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#override-local-interface-ip) if they are currently turned off. These settings allow Cloudflare to assign a unique <GlossaryTooltipterm="CGNAT IP">CGNAT IP</GlossaryTooltip> to each WARP device and route traffic between them.
@@ -44,7 +44,6 @@ To install WARP Connector on a host machine:
0 commit comments