Skip to content

Commit 77dedb6

Browse files
[MT] Warning about anycast routing (#24094)
* created partials * added anycast partial * created anycast partial * added partial * refined text * added conditional rendering
1 parent 762cb13 commit 77dedb6

File tree

4 files changed

+31
-3
lines changed

4 files changed

+31
-3
lines changed

src/content/partials/networking-services/reference/traffic-steering.mdx

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -160,6 +160,13 @@ The following table exemplifies how to use geographic scoping for routes:
160160

161161
When there are multiple routes to the same prefix with equal priority, and those routes are assigned to different geographic regions (like WNAM and ENAM), traffic entering the network in a specific region — for example, WNAM — will egress through the route associated with that same region.
162162

163+
{ props.magicWord === "Magic Transit" && (
164+
<>
165+
<Render file="routing/anycast-warning" product="networking-services" />
166+
</>
167+
)
168+
}
169+
163170
### Region codes and associated regions
164171

165172
<Render file="traffic-steering-region-codes" product="networking-services/reference" />
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
{}
3+
---
4+
5+
:::caution[Anycast routing]
6+
Remember that Cloudflare uses anycast to route traffic. Anycast is a network addressing and routing method in which incoming requests can be routed to a variety of different locations. Because of this, traffic might land in a different geographic location than expected. Not all requests are sent to the closest data center due to the complex nature of Internet routing and peering relationships, and how Cloudflare optimizes for performance and reliability.
7+
:::

src/content/partials/networking-services/routing/configure-routes.mdx

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,13 @@ Refer to <a href={props.trafficSteeringPage}>Traffic Steering</a> for more infor
1919
- Regional scoping of traffic to reduce latency
2020
- BGP peering
2121

22+
{ props.magicWord === "Magic Transit" && (
23+
<>
24+
<Render file="routing/anycast-warning" product="networking-services" />
25+
</>
26+
)
27+
}
28+
2229
## Configure static routes
2330

2431
### Create a static route

src/content/partials/networking-services/routing/configure-tunnels.mdx

Lines changed: 10 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -43,14 +43,21 @@ To configure the tunnels between Cloudflare and your locations, you must provide
4343

4444
You can use GRE or IPsec tunnels to onboard your traffic to {props.productName}, and set them up via the Cloudflare dashboard or the API. However, if you want to use the API, be sure to have your [account ID](/fundamentals/account/find-account-and-zone-ids/) and [API key](/fundamentals/api/get-started/keys/#view-your-global-api-key) ready before you begin.
4545

46-
:::note
47-
IPsec tunnels only support Internet Key Exchange version 2 (IKEv2).
48-
:::
46+
{ props.magicWord === "Magic Transit" && (
47+
<>
48+
<Render file="routing/anycast-warning" product="networking-services" />
49+
</>
50+
)
51+
}
4952

5053
#### IPsec supported ciphers
5154

5255
Refer to <a href={props.tunnelsAndEncapsulationPagePath}>Tunnels and encapsulation</a> to learn more about the technical requirements for GRE and IPsec tunnels used in {props.productName}. In this page, you can also find the <a href={props.ciphersPagePath}>supported ciphers for IPsec</a>.
5356

57+
:::note
58+
IPsec tunnels only support Internet Key Exchange version 2 (IKEv2).
59+
:::
60+
5461
#### Anti-replay protection
5562

5663
If you use {props.productName} and <GlossaryTooltip term="anycast">anycast</GlossaryTooltip> IPsec tunnels, we recommend disabling anti-replay protection. This setting is disabled on Cloudflare's side by default. However, it can be enabled via the API or the Cloudflare dashboard for devices that do not support disabling it, including Cisco Meraki, Velocloud, and AWS VPN Gateway.

0 commit comments

Comments
 (0)