@@ -38,19 +38,23 @@ flowchart TD
3838 ST -- Resolver IP included in WARP Tunnel per Split Tunnel configuration --> QW["Query sent via WARP Tunnel to be resolved"]
3939 ST -- Resolver IP not included in WARP Tunnel per Split Tunnel configuration --> QO["Query sent to resolver IP outside WARP Tunnel"]
4040
41+ %% Gateway evaluation after query via WARP
4142 QW -- Allowed by Gateway --> OR["Evaluated by Cloudflare on-ramp routes"]
43+ QW -- Blocked by Gateway Network or HTTP Policy --> BLK["Traffic blocked by Cloudflare"]
44+
4245 OR -- Onramp routes do not include resolver IP --> GP["Gateway proxies query to resolver IP via normal WARP egress route"]
43- OR -- Onramp routes include, resolver IP --> ADV["Cloudflare onramps advertises route that includes Resolver IP"]
46+ OR -- Onramp routes include resolver IP --> ADV["Cloudflare onramps advertise route that includes Resolver IP"]
4447 ADV --> PR["Private resolver returns IP address to WARP client"]
4548
4649 %% Right branch (no LDF match)
4750 C -- Domain does not exist in Local Domain Fallback policies --> GWR["Gateway checks Resolver Policies (Enterprise only)"]
4851
4952 GWR -- Resolver policy is not matched --> C1111a["1.1.1.1"]
5053
51- GWR -- Resolver policy is matched --> IDNS["Internal DNS"]
52- GWR -- Resolver policy is matched --> C1111b["1.1.1.1"]
53- GWR -- Resolver policy is matched --> CUST["Custom resolver"]
54+ GWR -- Resolver policy is matched --> MATCH((Resolver policy directs query to one of the following))
55+ MATCH --> IDNS["Internal DNS"]
56+ MATCH --> C1111b["1.1.1.1"]
57+ MATCH --> CUST["Custom resolver"]
5458 CUST --> PNS["Private network services<br>(Cloudflare Tunnel, Magic WAN, WARP Connector)"]
5559```
5660#### Terms mentioned
0 commit comments