From 028a6a74fb728dfed6e98ca8cc49c1fa65a44eac Mon Sep 17 00:00:00 2001 From: marciocloudflare Date: Wed, 2 Apr 2025 11:24:46 +0100 Subject: [PATCH 01/10] added ipv6 page --- src/content/docs/magic-transit/how-to/ipv6.mdx | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 src/content/docs/magic-transit/how-to/ipv6.mdx diff --git a/src/content/docs/magic-transit/how-to/ipv6.mdx b/src/content/docs/magic-transit/how-to/ipv6.mdx new file mode 100644 index 000000000000000..9d057727081cabb --- /dev/null +++ b/src/content/docs/magic-transit/how-to/ipv6.mdx @@ -0,0 +1,6 @@ +--- +pcx_content_type: how-to +title: Configure BGP peering +sidebar: + order: 4 +--- \ No newline at end of file From 369d7c095ddcea6422fbd443ad1357515805f712 Mon Sep 17 00:00:00 2001 From: marciocloudflare Date: Wed, 2 Apr 2025 11:25:36 +0100 Subject: [PATCH 02/10] changed page weight --- src/content/docs/magic-transit/how-to/advertise-prefixes.mdx | 2 +- .../docs/magic-transit/how-to/run-endpoint-health-checks.mdx | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/content/docs/magic-transit/how-to/advertise-prefixes.mdx b/src/content/docs/magic-transit/how-to/advertise-prefixes.mdx index 624bb7869d8f6a2..9baf0a942909067 100644 --- a/src/content/docs/magic-transit/how-to/advertise-prefixes.mdx +++ b/src/content/docs/magic-transit/how-to/advertise-prefixes.mdx @@ -2,7 +2,7 @@ pcx_content_type: how-to title: Advertise prefixes sidebar: - order: 4 + order: 5 --- import { Details, GlossaryTooltip } from "~/components" diff --git a/src/content/docs/magic-transit/how-to/run-endpoint-health-checks.mdx b/src/content/docs/magic-transit/how-to/run-endpoint-health-checks.mdx index d286ff7b77230d8..4b5c2fd251da030 100644 --- a/src/content/docs/magic-transit/how-to/run-endpoint-health-checks.mdx +++ b/src/content/docs/magic-transit/how-to/run-endpoint-health-checks.mdx @@ -2,7 +2,7 @@ pcx_content_type: how-to title: Run endpoint health checks sidebar: - order: 5 + order: 6 --- From aebfc46e20baeda69d6ec157f73cb8419039bcea Mon Sep 17 00:00:00 2001 From: marciocloudflare Date: Wed, 2 Apr 2025 11:28:35 +0100 Subject: [PATCH 03/10] added content --- src/content/docs/magic-transit/how-to/ipv6.mdx | 18 ++++++++++++++++-- 1 file changed, 16 insertions(+), 2 deletions(-) diff --git a/src/content/docs/magic-transit/how-to/ipv6.mdx b/src/content/docs/magic-transit/how-to/ipv6.mdx index 9d057727081cabb..d71974faec63840 100644 --- a/src/content/docs/magic-transit/how-to/ipv6.mdx +++ b/src/content/docs/magic-transit/how-to/ipv6.mdx @@ -1,6 +1,20 @@ --- pcx_content_type: how-to -title: Configure BGP peering +title: Configure IPv6 sidebar: order: 4 ---- \ No newline at end of file + group: + badge: Beta +--- + +IPv6 (beta) for Magic Transit allows customers with existing IPv4 tunnels to enable and test IPv6 functionality with minimal configuration changes. This beta provides an opportunity to evaluate IPv6 addressing, routing, and security within Magic Transit while maintaining the existing IPv4 setup. + +As this is a beta release, we encourage customers to contact their account team to enable the feature and provide feedback to help refine the IPv6 functionality before general availability. + +## Cloudflare support for IPv6 in Magic Transit + +Cloudflare transports IPv6 traffic over an IPv6-over-IPv4 GRE tunnel. Here is how it works: + +- The IPv6 packet is encapsulated into an IPv4 GRE packet, with the IP protocol field set to `47` (indicating it's a GRE packet), along with a GRE header +- The IPv4 packet header and GRE header are the additional headers (or encapsulation overhead) that ensure the correct routing of the IPv6 traffic +- On most routers that support this tunneling method, the tunnel mode is set to `gre` From faeea3d9e9d7a2135df5707981c2505b56893b77 Mon Sep 17 00:00:00 2001 From: marciocloudflare Date: Wed, 2 Apr 2025 11:28:38 +0100 Subject: [PATCH 04/10] added img --- src/assets/images/magic-transit/ipv6.png | Bin 0 -> 12707 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 src/assets/images/magic-transit/ipv6.png diff --git a/src/assets/images/magic-transit/ipv6.png b/src/assets/images/magic-transit/ipv6.png new file mode 100644 index 0000000000000000000000000000000000000000..868237ebb819909f9b526fa7382d914676b751ff GIT binary patch literal 12707 zcmZ9zWmr_*`}m6p3W799Nq0y$64Kq>9nvW+&46?cokRD~NO!}~A|Rd8NC^BlexKiq zbFPbF_GYh{weDW=0i>)b_4WFm0+rS|_HvwLRzzYuUW$p{Om%#gr=fCB`|KC%1!Q7Ys zcMa$J+;IM8IRy@m?X8TssQQ-|$3NXO{UjcQo#G^0<9{b4V8o>)N$P$|ic>Bmice8T zz@bk*74wwwESC0Mc!wiO=s(GFaWn4dzq|U~$8)LK>W|;kViw2lM`uG0t5rT%$;b0i z7O6-hG7KaH_&^ad<<|(3_D5R=o1d;DB($cPrIX7I_LuK_KQhBSJVq|rAYWVuOLI>mTCy5 zJ)EJ`?0RHQ^Ey@$VIe_9j5F*T zo&TT*+=!v1H{&8DA=yEvCATePd8~AQYozI!4G$qB3=lcCBLs=dr=_7ElVMyGzE28z z1#iGt)`7YAPoQVH+(pUKGz}yf?g;)TB&#ZGWf}q??eoKi=ZE%T4E%)udx#;=xbwd! zfg<)8NDz&TyvUeW&$oyRS?OFe) z*3?1XD^kuJ-}7OglkYss)&1`xPXvhcnxshmF1e#n?dz0;A7)$5!(7gXX+5FsIiEp!S2xlZj_=Qt=SP-N{!c)8>N z#YIAW10UQ4b?CU=scc&Hj+emWyBOnuaTI5s-!dcAPYT_8c3fmNEExJ^d+pFWUQrxZ zu9_z*kbGHxVR7>Pk0FXelq|7Jz>Ey-d%#tQ>}o_&>H=HbhseV-{jQffpB_#EPJ>BN z<)hyJ7zud1$Ps=#i=~wO*2Sz!tB`=Jsco`g;F;ynxY(?rKIQ76km=Bz*#Yny;5XTcw$V>Ho^5TJ=7x?8nm^duix*H5WV+Xw8X%FOBdj z(8m4h%T}M)ZWhl^>L;Pco6V=cyTX&gPk%fAZnHFNX%#IG55C79v<>IA=En$3HS)hL z7Jk@=DG66Px>;bMlUz@Up&NK@Cokx`zJ-aO{X1 z-OipR^z`=vrYLX>3{E3?pYv)~ZMRtYM-CvHF98Vf%{_AjejbeAcY~(T%NejEDbD4y#I z*8D`?Lj1e!L@0IjJ0hO;`u*CI|K{g_4G?Xsd)JHC>NREpcfj8|wi4v38kcR8^?n)} z`rmFJR@9@t8`_9snegpXUefOKc^ox*#2SxetQrbynUQ7u33w7NJ0S@=!6@yk_JgwW z56$aAZiBly0Ue(#5o-}x8fI0$X=O`3T&7sj#t4fz?XCdMQ*Mj~|!rCVkW+)JSCW^_+B_JRr zf`Um54gYP}n)1yX3a$y*I zWEaM2)*WZjPZs6-4VOZbY=gu}$v+%Bzi)(``cvq6{&XLe-7{b8(l(2BUk`kpa(i5O zMp7R9ZZ(7H?4Z2*H{cWEJ|_Vm6p0%#jJdr-2c1TR|DN{Z;c%B+&Fitm$2;|Z)sBUv znZ6;8Y9+%GFYJP3ICys>zLRGkrUH$%USH%q=|2LM!M+;{ndZ1W3$J-aUlt0p&M!2! zZ~E!+X`LxaO@T|JD7#gEW5plJSo=!hp6OeSUwBcsDrjm7qH#r$80HC6;5nOTy+%39K^cxnn&fLr zHet_2lW=wNlwdQPvrCwg(mfs$oj9KCsbj#sULr?4TcB#0wJxuMZ4!edUoR$kTn{B% z4PYOj8zwdVdOK5J$!wJWU55XnjbLAstF=jr8%!9s`w&n#MxIU53MOpW$Qfj0thj&xXGmE8M=} zw^l!S;%l5%#*A)7kWFH%Mig^jvc`?`-Ams|mtm-DN^_tNsBulQ;BrLiH&(cm-%BC>mV zkf1jVqLPwl{9{BD@bynl(ZoUA#SbM`)RevoHar3S$b%IAL_8X9#so*1QZmEQ{A3O} zv!vaP@m3)1t&E?&CsFerAh4R1{XlKfAAh@*sI)V7O{7tHj?|LiO`V`a3bNp77oZXD6Seconu(l^nCmiIxmw^se{?N99ecQJpwABz?r z+z9wE+L$v@?7l@Y{1B%#N%e%a${`9K8cmURwm@aS13hd-bR?v~@79$jJOJys(#Q+={Yx-8#QCtA2VqrC%W6ewr0@^M&i&RI0sf3#POB^J`{ z4n@q`540{>W>ngQjxFEP|L%P9zgRN@<60(;cyK8()S*SgGV_Equi>`Pk`mQ+rqXC{ z_o?;@;HU`9#Uw_CIT4oTX;IBb9IyxYZK}eWJ5@+s?-#f?PYcL*G88U-1s(oG^KK z4@j1WZWLL6IykQ|wMrf|KGjyj*aUs66cTPYPpl7G)jlzm!0u&=P8JEBE2eSN}Cy0>zAC>;M6sXhw$}j|9+8Y8uXBkRXA1Z>4z z!So*u{~7l&+uuca?k-aY8HQQF#CyAtIoYnC@0!kj2U%ofnSo>Q0K{C&Srg}Tn&6UF zyyTL&5?tM@i5f+E7#fk5t%!`Nt>@5E^o}433x{DqY6#UYE5)wByMSBRJkIJn85VLN zNgwUOp2)W+q?_&mIYvcYpRe(AB-QpM3j{6!Z&ekD_VU^T`xMKG+CyexKC&y!6v?x%@_7z=@sLTdL$tli%rK7`eFnq9deVbl-tSF;H@^j zjU9a%g+@^DvLq$3Fe2xOTN*}f)rylW!u7H`p#`StwKF^tBHPcpNYJ;*5749~%Yx*Q zLx1|qH77C4^2)}Md3*9xkci2mhMN70b8hOyilL9avq=zPc4X~WY{xM}S117n zX3<>DcCZ`WBm8ozU|YR8SKnG4MpjEn`Bvh>~fyae);?g zk41=%>3f{rGngb23mHe9k($U%rMV|pK%Z5D^ifFO0*!adDwGjQoHbBpJy$kz9%+xN z(6p3{IQ}N(6@{Gz7oAOEf0VAC_B7+Ifq{44WnnxCT1du#Z~L3?nr=dQDxihqvOJ;5 z6JTZ)n?0^8GSCgJ$*GR8 z@Jnie zd(*x6E%VfP8ovZ?dtV~DRX5msEe^|o6+wIBT6sVBKVmrCbjjnY$zce`?14sNY$C$P zZvXVqXL)tY+BoBMnD;{^DjH;U=Q*}uOcz~Nu=+PBc<#$F2=VzF*Boysde&2}6}+kG zE5fSl-uX;Ryi@3AXLh3GAQ0Fbs&tqn?nYtrVF^epHPuYA7{_KX!1IzBmdw$qD~xY6 z3A309Ve9yyKopfQp*}P+s%7Zazid&v5kiRr(Su+I8a9i#JS7$(g(7UbEl{K=yx%t` zcyK(DUy>CrIvjyYmmSd@Jen~P}O zsW$g27NGqDnZP3ppfDXjT^0*_sa!Zy?a81<7v0ImL6=rsdLzP_G0mbOqHYOl-WO_Z z^E4y*>yi%4e0?58(rwhR1V_r;pFSdA;YK;GE!)^U3{7dVvq5b-KZlL3|zsaTmKic`>wKBCBhC?yBh22_P@Y(9&($(*k?Vc3?r zzjANbnbQMzGH${2GFvzKa)jJfmc0}tmY}IQ7XiK)i*C`KOJYeE*@Rz>L+ddJx%zrw zvhKfoQoij3qRfyf)aNQ;Mbd5~Y)} z1e+|#K5Y{dwy=_p^_mZXGatN1^C!N6*}-1wip#Dx z_Ib*!g{RvT>Wq)-MM>k}v>am1=<~cGJ>448W z*vvV>l#WduVmm!pKB<0!|8xJ*R8sQ~$&3_2c<>Pe@-h1z1aGpRQi9l_)@lixyhb%{ zMNb%0sV0rL2bVB?dOZ z?0|?WIR!z;iLP%x$9CqK(oNgJD*9_q#Pkyb#LSji19KsT)G@i}zZ9IWxC6c1<|o2t zuv%umuo3>iWnj5;oQ=aWFK8)KTtc=Uh4qFp5B-tb+uU8!e_LvLcf{iSELEeW{ki** zpx^{F2p3(A)bj=z>(ui;N0Fvijkb{82fPBkvZGHqGqr#4V|^Q~U-5g}3xU*~!!UL< zeVRB16F`f__iN3x82aDSQ^ zy?_y;QEeqCMWt&nNPhEaH`2i!wP=A8M^#x*!=6jLAi~xcjRq6j@Fl7x3WeCP;h;F< zZ0D)qNs~rlTqh4<`8B0%=@*9#4yyH2fUad*bz93@+?uX#g)B6J(*U_6)}>(2ayuav zk_9>Z=*?$kWEV*g%qO zz?hu$_<5g_mO`Y`q_n{1%mCQ{`(C7yDYPm zd*5vjB<|u+tC2z+C8WOeIweM^JH+K9JvsZ-W1LHM>tASp&ovRbR}b3pw}~Rvk0ji? zg$P2r*(Yi(0@|tF&{rt8AAWGTBT&{_d&*$)0Nv-VVHgW;Ro4mhgW_+*CB|p$mT5n1 z8H5<_=%I#rxVB|)u3W>Ft+{4NzF1LG~g(rGq0p?gjdZHxNen zv8dyn)A&TBs9JvxatiZf2a^{`&HC8rZWYv>$*C7Md{PFr1p0u8F^@hl6qdi`?h!fV z6XJ+J(y~32&tQ_~A(ZDA zH0<(Ii^~<>)qi=wguN7olj=~hqS}*M?(RyLrb#LEz_y`VE2uL5box z<+_WA9lDJ`xH9W&dWocN^;2e-w0`LjJ=>U*pDj@o@D+KQJXoHa3z67G^|+a@%sr9= zU$#t|wlQ82BJFl!HZh6(n{7AaOX>R~DieMDwM+t& zHD`!TyptPZQKY5hPf^LZhP&cmW>xxLEA$i?y9`5^41^B-Gdy*vx$gOy@E8`G?E92p zmysdUifzO<*lc%ZeR;Mm zU(RsHx<*26rZb6)dgZ!PX6(nmfWDeZDAx(lTky#h*^SiZvXUZ)K^*yp2E{4L zxhfO6Pd;>)?;FU;`^)=I&&(%PAN2Tz*=fT(ft+q=*WvBh=qJ%VqDVativ)ubWi$qPdt+ z5CUjqxREgnQNv4?-zu8$xVU+&c}t(=hNz`rl!NF$QG2SIM;>u1GY^&lQI7^Cf?A|6&k?l?h$C!%Y^)u_Nwa*%UG5-HdE2q_{%;Rpzd6!^PN|I5I{@d9AzDVC^8#4p;Qs%RLJUrm3$-9ec|mcyiTEwiK^kH>)a_>?CvXEdlnOkOHNy zlWLkuKq*w{gHPmF(Y%*eP<058glnr!4>wa{-hQPl1e~)$&v5(kJG6P5epy2&(ipaW zQ?+-`-3j{D=18>Hxr{`H-{H={Wist)M<=7NUZR0&mG9v5{Uyl$9daW0{3 z>_VDiu!eF`q7v4RUIv`A1r}VX&9_ZrLHMIMHn)4zVwg=j=oLoHvU$ITrQ0^*sRzZV zRZAq!OkB#@HwxeMrpItt;ki=9PLqRaIOSilsgGIXXHXkj!kqh%-a^~vJ&|2NoUaC! zCa@^N*ArIGOPA*Z*!b8L{BvXk2h<^|74kP2!RVMH)J@bXH1;U{t-P!e%B3zajn^)H zgi$53L!FSS$Gu|Stajlfr^<5Tla-U5_OvE-P^TqJXDGG`{T+TWOJvb8FQ_Yuk{dN@ z{4yR1!8T9?aHA8VVJIrHMNxlB+L5SI7u1+9kr!0%lKJ(MhhhS+5yjh|O6DPY-}>?3 z&k+Y9oT-q`VLJIgo?G>sDX?zZd89e41GNV2_m(;YHc3dTG$-(KY_vKkDp|1X6VCT1 zS><(+@wpckRAf`U8|=|YF%s(*A1Onp+OrT-*L$c?Il1~RqMSMBk1Q1x6gXaMb(J7h ze#y42WwX?SQEH6diu=l3?RH-J%yXwQ1%l0r+AbT-NvOKs1Q>@?Q8`5KrwfN5^`gtG@TA@;sxeOcvbbJo33{^8j#8nSEqI&hxOdWB6YFn83a()^yOE%h z0Ig$+M3`@@bKl20OeK$cPWkO{?6bVS+PDUiK`j0^#6Eu9gM7ODyvBE%@aG)&cOM;?ORIcK=-8+e zlr6sEP3g*qrdv7ertl)^hpTSD!FS?3>EI39cw=SgbtE}~qPHorB4mBFR_yd0@HO() zIZ|myxdU)tjcG|m=3k#hJCmf%RKR{yaQ`Z`j^y}yC=-dr^gvOxywyfz5yDU}?y|7` z+lx{porRJO4yk613VQ+$%B7xB!Un4oQEv>Q4HqY2NZqbWzM$UHGSo_q&M;HJImKmt>;3n%|VPWCa>3nkSyyJp!_t|@~2|e63WDmrbK&N zkokw%**aeMd@o5GFk*tLvjc5R5l;PY&2$EtJ(CLTE9DuvP21tu6WZgUnydYRvMAhY zCg-hZu_=a(s7%gG7Hs6x)V@_4-A)2Z1}@6yiJ&r)q(yQRa(ku>jD${Z_pV^|)rj*C zv8ju3Z-^LuNcKf?IWV6^!DDsM);~|dfnYhrQrWTZIO*@Y=LL08hrI{gekfI5HSCCl zt}%iwRFT3|=}JGNs_nb6+*W+B33buJHtk|a)>C6;Ry={86mJ}QfKe4>ksTW0UA#4H zYvya7lA;VkjlUQI#v=|Hu(;|;TQ*5V48kg!-?W|@#Z1-II43IYi>P0?l`;E-lUrwL zgNb1y%PQ;2vaiaHWQN6A)-EvD9K~LoegUTM@gDXm<9$D5cP8hd$Vc%FiO0qz!AAA3 zMC+)#RJSaxM?L#~SzAl_EvH6u^Jo7Z8O2srP5--J9e3ESM^77=Plv%@WsDwep-OT| ztjL^>B^%6L`K%;zuLiovCu3*_x?ws3$|^ZW$z>YT#iyrCUmjPdUO|!O6(rSF;b(` zURK`xkY%+>Rm^avQ`TR2A8yA=7TkDkD$}AP6bv9et`mH(QMQ6)i)v)jiH|cQ%o;O( zse7I4w2oHMp~WR8tKf7NX7y4X!#-8#;!AMoSiuE7ZTso!zR>bsRo4i3>YskNYfCN( z7$P&CNgsRE%r05Yi0bEEr`V6LP&Sm4`}S_GK$rKtshkL$LLqK*8RB--y)pVHJFlAq zM+>B(3ekAwslsfUeLP0P;g8{e?X3J&XOv<_IK!A*%3f%1l-b{^z{G&XE(%$xlqYmbdi za;Up%FqJA|>26oD%xZdzHOqvk%Ix{(j><-1TcR%zjhHW{x|#uatRrvCv;-y>O^Hjz zEvRQ?7;TG}-@HvpgqFzqAIgo@g?ih6Vh`h~>=vsv=J`$yQ!8m{KSb;nC9+sdfK0-= zp?AbHc?Kq0^5p~MC-OCD-`1ITx#`Ah^D7hX^Tv)Cm?wDee=u?;FIvRB_VH)rd~gQs z^NV!9Fnv(*`gv%_zagk9ByTABrSZ!c-sTX2rY41blYUg0?#f2M2xc(z5JOXl*;a1C z2y-e8m6VoQ2QfPJdB;98IGaL>fhOJj!tOhELHRO;Fb2Lpf-P~x3*Kr9qV;u(#obEm zz=yl`xY!ej*#u!dLi>C$K}!UD^U<3KS7}2hVLg+ zY8R*{?VlFd-9XorjX~ri0=zwivJWIVhof=Bk}gaJzHQ?#5e+&~>@x_19O!)yHN|-e zEK>odB@7q78yYs}G}!x(by0SF##?;;=KuNk7?lyYeOvx3Cj9L)XF31BlPXHl!Kfwp9<6&ThXN~2(x-Z!CN7FWsRgf{al)Ot)u z)lXQ7HH!dphql+Y?|##yT%NI`Y>AW(eU3j%D4UcSt!`8qnlq$tgc+XGXjH>Nf3eBw zm%^!Mn(el;=x$d{NIUj)e{C@6!OxHPAG?D@h0s%s%R&A>NGF&3d6?tM5>o#O8D!H> z{9ntGw}8C19O~24|HOv}h#j_n!v#KS8!WV;Hnn!Y%mZ3dgN4cy(rbtW#t-`V{A$YwHvxT$UxU7W&A7j-6H@-kpPE^zh#0c zo-OqeUg_i2EK~j13?+V$%@tA=+3#0@m%l(64y~m`t}}_ ztd%6)xP3p#YWlF`#sn|M-swAagRQcc-rB4@GfTgsySiVKqJ9Mq@~fp-5nu>VGcqz1xms3;FursE;Z&F4!MadyA&+M4% z$JhZh$<4}*!5b48#`}=3)TVtAm;k__tTe|o$vOgnOlzXCSOx@GNXA+@{&)NC0R01; zR{B2P?qUaA5n(Cep+A4}yVUx_pS8|kVMN?N-C(rYUreu;tU7@el#hy*Z%gyLT#5Kb zj4wN2s~EnWG{)+7tScx?v8@XpMV@1v(>@tBf0=@{A4hErASi%cyF);Os}o{^z+q^t z(A^$DvP_{lPtCpy1dPySnHEmsy$75YXV{jNaswyF%uOqGp0U{S<(|zFr5>2gcL(K9 zw{w%rmjEfysK>N-@U1HiK;L#VU8_1D?*O<&5w_b^9s_*wJ;0^_%!iFE23QO=&>4_x z6#zs41O}ON?SAzS4cI)vP}rEY(opOjBH$XikzI$?o&HY`e}qrFUOwYKX0aa|_wu8% zJ(g_>qPcZt2EpCPj<|Xzp|~X$*Vn(Cs6`831_I6wvwfks@&+)SA;sx1ZO&2Cnm+*6 zRGkCw_rQT~HiN9dZHm6jFaQBPYxl_FSj7&X5<~toKDxi4H`&xAk{|$$tUW#cac1(B zQv-bE9vEm7z^(k5Lr9aY&2=scj_CG969dO#lOksx|;`xZTZ}^xJk*eqwY8Ua3CW7Y#n_}CaAz#DGK*79rZa4fmN<91y4*uRR!%bo+ZUDAw&5m z>ALtxX>qphud(mmIx09Q2$F>KKwt(v!%vF{#UkG1G0x013K^AY)=Oocp^NB2NzJ~Dk zm&Jc6;vgCj(>vDaQs`e+FbVA{={>O7Gyx3RrB&fOZr!>MdD#zeWLd&4+}#M+W86RN z3cj(+Dv`GWfd#-aVmaj`?z8?zO1?<<0OgSm_z+E|Q&0AFJ)`&9rT5>n!FM|5@s7Tf zAvaYb2f2SENRD#5BdUP)%Ga+-rGF$k|^uK%>k}`rDe-EY$!A0@!ClN_G(6?3yTlua0E$^PUxn2ropFaWmifcvTG?{}XT!0bYqMci7kn@EI=E->(l+n2_KD zg~S0xkp>ZHAi{G=e)V#?n$z;EU><)7JAbhePU`;!sPaT!Tk$Zp?|;un9V%OP(r@+l zt+L$bfhhCo!<0H|J*+bL$QQ$V3`8y0oVu2g-xVkWcmC|YrculTc4&r!%X|CV0>e|Axrs5rvi#k2b5 zW!tjr@23ih<9I;9EZ(UL9iQyDP8;2Kr^`xY-EB)0Mt>MmVWc z_3P$!KW|G%zeMAO+vY#4a0S4qhTl1|HC2T$W1lzA02`odfyx-~LD5jPG7}(arx?1= zX}r@m4kWNl%d^vMwd3cajWkaM!r7)c%lAwiO>>Kgt`&MVKxF1K+mI7*<%&Wy-&#$3 z5yGcndsx{t00oKxZ*G9p;1txBO@4Y&Rr>x_UMJ8t(}p9xVp$(~>|exym+Cb}5A;8K^sAji&!Yarof2PrHv zKSQFF7T@sK@MafsnRptG~P-A=Vy z>BUVDh|IDFa_~E6o`*|V6Rds)6q?msXjT+7=6SP$tt8mJ_zX}d!Wen{0O+|G!UCWq zD{f1~1sfIh6S}YX&ut6>9I?$^cdu+ouw>)6?I9JivI}CGfjh49P$L@_i!Etv-ym1mZO@La6Eu0H(chBfc-r zw5v0p!B+q(=FTp&G|E=@iX8Qfa*-^rueCd>9aOZyOig|!l8`Qp!_k%9STOMA5#|j% z4Fo~daq)3Y^zIh&GERzOtF9kAvo zKiFV)iq%L9im44H(Sb!=+#RHZ+3;shvd)*%!1Vs(tqfb$|S zaUlVz6x9JHiB8uMU&4)N^H~Mr-J&7>w-drA*um+G$lr+Y!Jw~+VDTc9+JZlqt)xuu zKrtp>O)Cd+<6gn*LVtM`R$rRr&9pY{NjWUV1IQ4 zG=ls{JQhs|H;UARugcvz-@A^n0cbTkjjT~0mjrXlu_U1X2(wIn->>;Tfg;~AjdRT& zdhvNPLq0jtYh;JNj}52q$Ix_`jyqcE(Hddy#U)Gy2=Mqtj1kRkyz<la*%an1IQOUGw1aKy2kc^NE|2v5=nb4$4T)#vGn`) z6&pooSC{l^c5w^P+h7)rb^e*=7OLy>0^tG~BlchI6v@Jf*z4wx*1Y8UU$KkG>ZdWF!>Dt3DYA{XfZzLAd|` literal 0 HcmV?d00001 From e083ac36d6947e5a626fc6dda9e3c0d406f5457c Mon Sep 17 00:00:00 2001 From: marciocloudflare Date: Wed, 2 Apr 2025 11:43:04 +0100 Subject: [PATCH 05/10] added content --- .../docs/magic-transit/how-to/ipv6.mdx | 29 +++++++++++++++++-- 1 file changed, 26 insertions(+), 3 deletions(-) diff --git a/src/content/docs/magic-transit/how-to/ipv6.mdx b/src/content/docs/magic-transit/how-to/ipv6.mdx index d71974faec63840..9d1e3b98fc31785 100644 --- a/src/content/docs/magic-transit/how-to/ipv6.mdx +++ b/src/content/docs/magic-transit/how-to/ipv6.mdx @@ -15,6 +15,29 @@ As this is a beta release, we encourage customers to contact their account team Cloudflare transports IPv6 traffic over an IPv6-over-IPv4 GRE tunnel. Here is how it works: -- The IPv6 packet is encapsulated into an IPv4 GRE packet, with the IP protocol field set to `47` (indicating it's a GRE packet), along with a GRE header -- The IPv4 packet header and GRE header are the additional headers (or encapsulation overhead) that ensure the correct routing of the IPv6 traffic -- On most routers that support this tunneling method, the tunnel mode is set to `gre` +1. The IPv6 packet is encapsulated into an IPv4 GRE packet, with the IP protocol field set to `47` (indicating it is a GRE packet) along with a GRE header. +2. The IPv4 packet header and GRE header are the additional headers (or encapsulation overhead) that ensure the correct routing of the IPv6 traffic. +3. On most routers that support this tunneling method, the tunnel mode is set to `gre`. + +![The IPv4 packet header and GRE header are the additional headers (or encapsulation overhead) that ensure the correct routing of the IPv6 traffic.](~/assets/images/magic-transit/ipv6.png) + +## Current known limitations + +- The IPv6 beta is not available for accounts with CNI links configured. +- MTU is 1420 bytes for egress traffic (does not impact Direct Server Return). +- Magic Firewall currently does not support IPv6. +- Cloudflare supports the advertisement of IPv6 prefixes ranging from `/48` to `/32`. +- Limited to IPv4-based tunnel health checks only. +- Supports only IPv4-based endpoint [health checks](/magic-transit/reference/tunnel-health-checks/). + +## How to configure IPv6 + +Since IPv6 works over an existing IPv4 tunnel you will need to choose either an existing IPv4 GRE tunnel or create a new one. All settings that apply to the IPv4 GRE tunnel apply here, and there is only one new field you need to fill out: **IPv6 Interface address**. Here, you enter one of the IPv6 `/127` address from `2606:54c1:7::/48` that Cloudflare automatically allocates for the GRE tunnel. The other, you need to enter in your router. + +To configure IPv6: + +1. Follow the instructions on how to [add a GRE tunnel](/magic-transit/how-to/configure-tunnels/#add-tunnels). +2. In **IPv6 Interface address**, enter the IPv6 address you received from Cloudflare to use on the Cloudflare side of the tunnel. +3. Use the other IPv6 address you received from your team to configure in your router. + +For IPv6 tunnels, the same [MSS clamping](/magic-transit/reference/mtu-mss/#mss-clamping) recommendations apply. From 849beba850d8bce2e09f8a061ffb86efbc4b3bbd Mon Sep 17 00:00:00 2001 From: marciocloudflare Date: Wed, 2 Apr 2025 11:43:50 +0100 Subject: [PATCH 06/10] refined text --- src/content/docs/magic-transit/how-to/ipv6.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/magic-transit/how-to/ipv6.mdx b/src/content/docs/magic-transit/how-to/ipv6.mdx index 9d1e3b98fc31785..c7211a3e30c6042 100644 --- a/src/content/docs/magic-transit/how-to/ipv6.mdx +++ b/src/content/docs/magic-transit/how-to/ipv6.mdx @@ -32,7 +32,7 @@ Cloudflare transports IPv6 traffic over an IPv6-over-IPv4 GRE tunnel. Here is ho ## How to configure IPv6 -Since IPv6 works over an existing IPv4 tunnel you will need to choose either an existing IPv4 GRE tunnel or create a new one. All settings that apply to the IPv4 GRE tunnel apply here, and there is only one new field you need to fill out: **IPv6 Interface address**. Here, you enter one of the IPv6 `/127` address from `2606:54c1:7::/48` that Cloudflare automatically allocates for the GRE tunnel. The other, you need to enter in your router. +Since IPv6 works over an existing IPv4 tunnel you will need to choose either an existing IPv4 GRE tunnel or create a new one to test IPv6. All settings that apply to the IPv4 GRE tunnel apply to the IPv6 tunnel as well, and there is only one new field you need to fill out: **IPv6 Interface address**. Here, you enter one of the IPv6 `/127` address from `2606:54c1:7::/48` that Cloudflare automatically allocates for the GRE tunnel. The other, you need to enter in your router. To configure IPv6: From 7a78130c6855399136dc90dc7a0eff8f09d06412 Mon Sep 17 00:00:00 2001 From: marciocloudflare Date: Wed, 2 Apr 2025 11:47:31 +0100 Subject: [PATCH 07/10] corrected beta --- src/content/docs/magic-transit/how-to/ipv6.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/content/docs/magic-transit/how-to/ipv6.mdx b/src/content/docs/magic-transit/how-to/ipv6.mdx index c7211a3e30c6042..75d8c6f1e62e1e4 100644 --- a/src/content/docs/magic-transit/how-to/ipv6.mdx +++ b/src/content/docs/magic-transit/how-to/ipv6.mdx @@ -1,10 +1,10 @@ --- pcx_content_type: how-to -title: Configure IPv6 +title: Configure IPv6 (beta) sidebar: order: 4 - group: - badge: Beta + badge: + text: Beta --- IPv6 (beta) for Magic Transit allows customers with existing IPv4 tunnels to enable and test IPv6 functionality with minimal configuration changes. This beta provides an opportunity to evaluate IPv6 addressing, routing, and security within Magic Transit while maintaining the existing IPv4 setup. From d82284de5906f4d8e62558b5acf10c5617f08d1b Mon Sep 17 00:00:00 2001 From: marciocloudflare Date: Wed, 2 Apr 2025 11:51:21 +0100 Subject: [PATCH 08/10] corrected links --- src/content/docs/magic-transit/how-to/ipv6.mdx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/content/docs/magic-transit/how-to/ipv6.mdx b/src/content/docs/magic-transit/how-to/ipv6.mdx index 75d8c6f1e62e1e4..52c0bfa62956466 100644 --- a/src/content/docs/magic-transit/how-to/ipv6.mdx +++ b/src/content/docs/magic-transit/how-to/ipv6.mdx @@ -27,8 +27,8 @@ Cloudflare transports IPv6 traffic over an IPv6-over-IPv4 GRE tunnel. Here is ho - MTU is 1420 bytes for egress traffic (does not impact Direct Server Return). - Magic Firewall currently does not support IPv6. - Cloudflare supports the advertisement of IPv6 prefixes ranging from `/48` to `/32`. -- Limited to IPv4-based tunnel health checks only. -- Supports only IPv4-based endpoint [health checks](/magic-transit/reference/tunnel-health-checks/). +- Limited to IPv4-based [tunnel health checks](/magic-transit/reference/tunnel-health-checks/) only. +- Supports only IPv4-based endpoint health checks. ## How to configure IPv6 From 1310847393a900732d6b102ef1292a4175ba1108 Mon Sep 17 00:00:00 2001 From: marciocloudflare Date: Wed, 2 Apr 2025 14:06:56 +0100 Subject: [PATCH 09/10] updated text --- src/content/docs/magic-transit/how-to/ipv6.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/magic-transit/how-to/ipv6.mdx b/src/content/docs/magic-transit/how-to/ipv6.mdx index 52c0bfa62956466..226cefd71aff3c2 100644 --- a/src/content/docs/magic-transit/how-to/ipv6.mdx +++ b/src/content/docs/magic-transit/how-to/ipv6.mdx @@ -40,4 +40,4 @@ To configure IPv6: 2. In **IPv6 Interface address**, enter the IPv6 address you received from Cloudflare to use on the Cloudflare side of the tunnel. 3. Use the other IPv6 address you received from your team to configure in your router. -For IPv6 tunnels, the same [MSS clamping](/magic-transit/reference/mtu-mss/#mss-clamping) recommendations apply. +For IPv6 traffic over IPv4 tunnels, the same [MSS clamping](/magic-transit/reference/mtu-mss/#mss-clamping) recommendations apply. From cc99c19fc835334daa0110a3ea37f7ff897640e4 Mon Sep 17 00:00:00 2001 From: marciocloudflare Date: Wed, 2 Apr 2025 14:09:08 +0100 Subject: [PATCH 10/10] refined text --- src/content/docs/magic-transit/how-to/ipv6.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/magic-transit/how-to/ipv6.mdx b/src/content/docs/magic-transit/how-to/ipv6.mdx index 226cefd71aff3c2..4688ed3e36b9a2f 100644 --- a/src/content/docs/magic-transit/how-to/ipv6.mdx +++ b/src/content/docs/magic-transit/how-to/ipv6.mdx @@ -32,7 +32,7 @@ Cloudflare transports IPv6 traffic over an IPv6-over-IPv4 GRE tunnel. Here is ho ## How to configure IPv6 -Since IPv6 works over an existing IPv4 tunnel you will need to choose either an existing IPv4 GRE tunnel or create a new one to test IPv6. All settings that apply to the IPv4 GRE tunnel apply to the IPv6 tunnel as well, and there is only one new field you need to fill out: **IPv6 Interface address**. Here, you enter one of the IPv6 `/127` address from `2606:54c1:7::/48` that Cloudflare automatically allocates for the GRE tunnel. The other, you need to enter in your router. +Since IPv6 works over an existing IPv4 tunnel you will need to choose either an existing IPv4 GRE tunnel or create a new one to test IPv6. All settings that apply to the IPv4 GRE tunnel apply to the IPv6 tunnel as well, and there is only one new field you need to fill out: **IPv6 Interface address**. Here, you enter one of the two IPv6 addresses from the `/127` subnet that Cloudflare automatically allocates for the GRE tunnel. The other, you need to enter in your router. To configure IPv6: