|
3 | 3 |
|
4 | 4 | --- |
5 | 5 |
|
| 6 | +import { Render, Details, GlossaryTooltip } from "~/components" |
| 7 | + |
6 | 8 | | On-ramp method | Compatibility | |
7 | 9 | | ------------------------------------------------------------------------------------------ | ------------- | |
8 | 10 | | [WARP](/cloudflare-one/connections/connect-devices/warp/) | ✅ | |
9 | 11 | | [PAC files](/cloudflare-one/connections/connect-devices/agentless/pac-files/) | ✅ | |
10 | 12 | | [Browser Isolation](/cloudflare-one/policies/browser-isolation/) | ✅ | |
11 | | -| [Magic WAN](/magic-wan/zero-trust/cloudflare-gateway/) | 🚧[^1] | |
12 | 13 | | [WARP Connector](/cloudflare-one/connections/connect-networks/private-net/warp-connector/) | ✅ | |
| 14 | +| [Magic WAN](/magic-wan/zero-trust/cloudflare-gateway/) | 🚧[^1] | |
13 | 15 |
|
14 | 16 | [^1]: Not compatible with [ECMP routing](/magic-wan/reference/traffic-steering/#equal-cost-multi-path-routing). For hostname-based routing to work, DNS queries and the resulting network traffic must reach Cloudflare over the same Magic WAN tunnel. <br/> |
15 | 17 |
|
16 | | -:::note[WARP Connector and Magic WAN] |
17 | 18 |
|
18 | | -DNS traffic to the Gateway resolver must route through Cloudflare's network instead of over the public Internet. If your devices are behind WARP Connector, you may need to [configure your router](/cloudflare-one/connections/connect-networks/private-net/warp-connector/site-to-internet/#3-route-traffic-from-subnet-to-warp-connector) to route the Gateway resolver IPs through WARP Connector. If your devices are behind Magic WAN, [create a route](/magic-wan/configuration/manually/how-to/configure-routes/) to route the Gateway resolver IPs through the Magic WAN tunnel. |
| 19 | +<Details header="WARP Connector and Magic WAN routes" open = {true}> |
| 20 | +If devices are behind WARP Connector or Magic WAN, you may need to update the routing table on your device or router to send traffic to Gateway. Ensure that traffic to the following destination IPs route through WARP Connector / Magic WAN: |
| 21 | + |
| 22 | +- <GlossaryTooltip term="initial resolved IP">Initial resolved IP</GlossaryTooltip> CGNAT range: |
| 23 | + <Render file="gateway/egress-selector-cgnat-ips" /> |
| 24 | +- Private network CIDR where the application is located (for example, `10.0.0.0/8`) |
| 25 | +- Internal DNS resolver IP |
| 26 | +- Gateway resolver IPs: |
| 27 | + - `172.64.36.1` |
| 28 | + - `172.64.36.2` |
19 | 29 |
|
20 | | -The Gateway resolver IPs are: |
| 30 | +Additionally, ensure that your local DNS resolver points to the Gateway resolver IPs listed above. |
21 | 31 |
|
22 | | -- `172.64.36.1` |
23 | | -- `172.64.36.2` |
| 32 | +</Details> |
24 | 33 |
|
25 | | -::: |
|
0 commit comments