Skip to content

Commit f7156af

Browse files
[CF1] new warp routing table
1 parent 7c99879 commit f7156af

File tree

1 file changed

+30
-0
lines changed
  • src/content/docs/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic

1 file changed

+30
-0
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/index.mdx

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -53,6 +53,36 @@ flowchart TD
5353
n2@{ shape: proc}
5454
```
5555

56+
```mermaid
57+
flowchart TD
58+
A["WARP user requests resource"] --> B["WARP Client proxies DNS Traffic"]
59+
60+
B --> C["WARP checks if domain is listed in Local Domain Fallback (LDF) policies"]
61+
62+
C -->|Domain exists in LDF policies| F["Split Tunnel processing"]
63+
C -->|Domain does not exist in LDF policies<br/>Sent to Gateway for processing| E["Gateway checks Resolver Policies (Enterprise only)"]
64+
65+
%% LDF branch
66+
F -->|Resolver IP included in WARP Tunnel per Split Tunnel configuration| G["Query sent via WARP Tunnel to be resolved"]
67+
F -->|Resolver IP not included in WARP Tunnel per Split Tunnel configuration| H["Query sent to resolver IP outside WARP Tunnel"]
68+
69+
G -->|Allowed by Gateway| I["Evaluated by Cloudflare on-ramp routes"]
70+
71+
I -->|Onramp routes do not include resolver IP| J["Gateway proxies query to resolver IP via normal WARP egress route"]
72+
I -->|Onramp routes include resolver IP| K["Cloudflare onramps advertise route that includes Resolver IP"]
73+
K --> L["Private resolver returns IP address to WARP client"]
74+
75+
%% Gateway resolver policies branch
76+
E -->|Resolver policy is not matched| M["1.1.1.1"]
77+
78+
E -->|Resolver policy is matched| N["Internal DNS"]
79+
E -->|Resolver policy is matched| O["1.1.1.1"]
80+
E -->|Resolver policy is matched| P["Custom resolver"]
81+
82+
P --> Q["Private network services (Cloudflare Tunnel, Magic WAN, WARP Connector)"]
83+
84+
```
85+
5686
## Add a DNS suffix
5787

5888
Support for DNS suffix search lists in WARP is currently in development. You can manually configure DNS suffixes at the device level using the following instructions.

0 commit comments

Comments
 (0)