Skip to content

[ZT] WARP connectivity stages #23261

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Jun 30, 2025
Merged

[ZT] WARP connectivity stages #23261

Show file tree
Hide file tree
Changes from 4 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
bab21d0
add status messages
ranbel Jun 26, 2025
969c046
revise wording
ranbel Jun 26, 2025
24afb26
update status messages
ranbel Jun 27, 2025
eeb116f
move content to Troubleshooting
ranbel Jun 27, 2025
f2277fc
Update src/content/docs/cloudflare-one/connections/connect-devices/wa…
ranbel Jun 30, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion ...loudflare-one/connections/connect-devices/warp/deployment/manual-deployment.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -145,4 +145,4 @@ The device is now protected by your organization's Zero Trust policies.

## Virtual machines

By default, virtual machines (VMs) are subject to the WARP client settings of the host. If you want to deploy a separate instance of WARP in a VM, you must configure the VM to operate in bridged networking mode.
By default, virtual machines (VMs) are subject to the WARP client settings of the host. If you want to deploy a separate instance of WARP in a VM, you must configure the VM to operate in bridged networking mode.
33 changes: 33 additions & 0 deletions ...re-one/connections/connect-devices/warp/troubleshooting/connectivity-status.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
---
pcx_content_type: reference
title: Connectivity status
sidebar:
order: 10

---

import { } from "~/components"

The WARP client GUI displays the following status messages when transitioning from a **Disconnected** to **Connected** state. These messages indicate the connectivity stage of the WARP daemon as it establishes a connection from the device to Cloudflare. The [WARP mode](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/) determines which messages are displayed during the connection process. If WARP encounters an error while connecting, the status message will change to an [error code](/cloudflare-one/connections/connect-devices/warp/troubleshooting/client-errors/).

To print status messages to the console, run the `warp-cli -l status` command before turning on the WARP switch.

| Status message | Description |
| --------------------- | ------------------------ |
| Verifying connection settings | Initializes connection components based on your [WARP settings](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/). |
| Validating network | Validates Ethernet and/or Wi-Fi network connectivity. |
| Initializing IP connection | Checks for IPv4 and IPv6 connectivity to Cloudflare using the [Happy Eyeballs algorithm](https://datatracker.ietf.org/doc/html/rfc6555). |
| Establishing a connection | Connects to the endpoint discovered by Happy Eyeballs. |
| Building a Tunnel | Creates a [virtual network interface](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/warp-architecture/#virtual-interface) on the operating system for the WARP tunnel. |
| Configuring the firewall | Configures the system firewall to allow WARP tunnel traffic. |
| Setting up your routing table | Updates the [system routing table](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/warp-architecture/#routing-table) based on your [Split Tunnel rules](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/). |
| Configuring your firewall rules | Configures the [system firewall](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/warp-architecture/#system-firewall) based on your Split Tunnel rules. |
| Checking connectivity to DNS| Checks connectivity to the DNS endpoint (` <account-id>.cloudflare-gateway.com`). |
| Setting local endpoint communication | Configures local DNS proxy sockets. |
| Configuring local DNS proxy | Creates a [local DNS proxy](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/warp-architecture/#dns-traffic) for DNS resolution.|
| Applying DNS settings | Sets the local DNS proxy as the default DNS server on the device. |
| Configuring forward proxy | (Only in [Proxy mode](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/#proxy-mode)) Configures the SOCKS proxy. |
| Confirming Tunnel connection | Checks connectivity to [destinations](/cloudflare-one/connections/connect-devices/warp/deployment/firewall/#connectivity-checks) inside and outside of the WARP tunnel. |
| Validating DNS configuration | Verifies that DNS requests are answered by WARP's local DNS proxy. |
| Verifying SOCKS proxy configuration | (Only in [Proxy mode](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/#proxy-mode)) Verifies the SOCKS proxy configuration. |
| Ensuring MTLS identity | (Only in [Device Information Only mode](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/device-information-only/)) Installs a client certificate for mTLS authentication. |