Skip to content

Commit 93e1d93

Browse files
UsernameIHardlyKnowHerNameranbel
authored andcommitted
Added clarification on using the IP of managed network endpoint and n… (#17327)
* Added clarification on using the IP of managed network endpoint and not a hostname Ive seen a few instances of using hostnames in your managed network, causing them to not apply. Added note to use IP * Update managed-networks.mdx --------- Co-authored-by: ranbel <[email protected]>
1 parent 3134ec1 commit 93e1d93

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/warp/configure-warp/managed-networks.mdx

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -170,6 +170,10 @@ SHA256 Fingerprint=DD4F4806C57A5BBAF1AA5B080F0541DA75DB468D0A1FE731310149500CCD8
170170
2. Scroll down to **Network locations** and select **Add new**.
171171
3. Name your network location.
172172
4. In **Host and Port**, enter the private IP address and port number of your [TLS endpoint](#create-a-new-tls-endpoint) (for example, `192.168.185.198:3333`).
173+
174+
:::note
175+
We recommend using the private IP of your managed network endpoint and not a hostname to prevent issues related to DNS lookups resolving the incorrect IP.
176+
:::
173177
5. (Optional) In **TLS Cert SHA-256**, enter the [SHA-256 fingerprint](#2-extract-the-sha-256-fingerprint) of the TLS certificate. This field is only needed for self-signed certificates. If a TLS fingerprint is not supplied, WARP validates the certificate against the local certificate store and checks that it is signed by a public certificate authority.
174178

175179
WARP will automatically exclude the TLS endpoint from all device profiles. This prevents remote users from accessing the endpoint through the WARP tunnel on any port. If a device profile uses [Split Tunnels](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/) in **Include** mode, make sure that the Split Tunnel entries do not contain the TLS endpoint IP address; otherwise, the entire IP range will be excluded from the WARP tunnel.

0 commit comments

Comments
 (0)