Skip to content

Commit 79d43a4

Browse files
[Gateway] CIDR ranges for FQDN selectors in split tunnel/warp-to-warp (#26242)
* [Gateway] CIDR ranges for FQDN selectors in split tunnel/warp-to-warp * Apply suggestions from code review Co-authored-by: marciocloudflare <[email protected]> --------- Co-authored-by: marciocloudflare <[email protected]>
1 parent 6a82c61 commit 79d43a4

File tree

2 files changed

+14
-4
lines changed

2 files changed

+14
-4
lines changed

src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp.mdx

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,8 +34,16 @@ This guide covers how to:
3434
3. Enable **Allow WARP to WARP connection**. This allows Cloudflare to route traffic to the <GlossaryTooltip term="CGNAT IP">CGNAT IP</GlossaryTooltip> space.
3535
4. In your [Split Tunnel configuration](/cloudflare-one/team-and-resources/devices/warp/configure-warp/route-traffic/split-tunnels/), ensure that traffic to `100.96.0.0/12` is going through WARP:
3636

37-
- If using **Exclude** mode, delete `100.64.0.0/10` from the list and re-add `100.64.0.0/11` and `100.112.0.0/12`.
38-
- If using **Include** mode, add `100.96.0.0/12` to your list.
37+
- If using **Exclude** mode, delete `100.64.0.0/10` from the list and add the following IP addresses:
38+
39+
- `100.64.0.0/12`
40+
- `100.81.0.0/16`
41+
- `100.82.0.0/15`
42+
- `100.84.0.0/14`
43+
- `100.88.0.0/13`
44+
- `100.112.0.0/12`
45+
46+
- If using **Include** mode, add `100.96.0.0/12` and `100.80.0.0/16` to your list.
3947

4048
This will instruct WARP to begin proxying any traffic destined for a `100.96.0.0/12` IP address to Cloudflare for routing and policy enforcement.
4149

src/content/docs/cloudflare-one/traffic-policies/egress-policies/host-selectors.mdx

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -102,11 +102,13 @@ To configure your Zero Trust organization to use Host selectors with Egress poli
102102
- `100.82.0.0/15`
103103
- `100.84.0.0/14`
104104
- `100.88.0.0/13`
105-
- `100.96.0.0/11`
105+
- `100.112.0.0/12`
106+
107+
And remove `100.64.0.0/10` IP address.
106108

107109
</TabItem> <TabItem label="Include IPs and domains">
108110
1. Add the required [Zero Trust domains](/cloudflare-one/team-and-resources/devices/warp/configure-warp/route-traffic/split-tunnels/#cloudflare-zero-trust-domains) or [IP addresses](/cloudflare-one/team-and-resources/devices/warp/configure-warp/route-traffic/split-tunnels/#cloudflare-zero-trust-ip-addresses) to your Split Tunnel include list.
109-
2. [Add a route](/cloudflare-one/team-and-resources/devices/warp/configure-warp/route-traffic/split-tunnels/#add-a-route) to include the IP address `100.80.0.0/16`.
111+
2. [Add a route](/cloudflare-one/team-and-resources/devices/warp/configure-warp/route-traffic/split-tunnels/#add-a-route) to include `100.80.0.0/16` and `100.96.0.0/12` IP addresses.
110112

111113
</TabItem> </Tabs>
112114

0 commit comments

Comments
 (0)