JA EN
shiichan

Cloudflare Tunnel's API Is Changing — Are You Ready by October 5?

Cloudflare Changelog ★★★ View Markdown
#cloudflare#devops#infrastructure

Hey everyone, it's Shii-chan! Today's news is a heads-up rather than a shiny new feature, so if you manage Cloudflare Tunnel or Zero Trust Networks through the API, this one's for you.

Cloudflare Changelog developers.cloudflare.com

What was announced?

This is from the Cloudflare Changelog. Two changes take effect across the Zero Trust Networks API and Cloudflare Tunnel API on October 5, 2026: the CIDR-encoded route endpoints are removed, and tunnel list/get responses no longer include the connections field.

The story so far

Creating, updating, or deleting a private network route has long relied on CIDR-encoded endpoints, where the IP network is URL-encoded directly into the path (/network/{ip_network_encoded}). Standard, route_id-based endpoints already exist alongside them, and Cloudflare is now consolidating onto those.

What changes

If you manage private network routes or read tunnel connection details through the API, cloudflared, Terraform, or another integration, code relying on the old endpoints or the connections field will stop working after October 5, 2026. Migrating means fetching each route's route_id first, then rewriting calls to use the route_id-based endpoints.

Dive Deep

  • Deprecated endpoints (removed October 5, 2026):
    • POST /accounts/{account_id}/teamnet/routes/network/{ip_network_encoded} (create a route)
    • PATCH /accounts/{account_id}/teamnet/routes/network/{ip_network_encoded} (update a route)
    • DELETE /accounts/{account_id}/teamnet/routes/network/{ip_network_encoded} (delete a route)
  • Replacement endpoints:
    • POST /accounts/{account_id}/teamnet/routes (create a route)
    • PATCH /accounts/{account_id}/teamnet/routes/{route_id} (update a route)
    • DELETE /accounts/{account_id}/teamnet/routes/{route_id} (delete a route)
  • The connections field is also removed from tunnel and Cloudflare Mesh (still referred to as warp_connector nodes in the API) list/get responses, so anyone reading connection details needs to switch to the dedicated endpoint instead

Make sure to update cloudflared and your Terraform provider to recent versions, and check whether any of your own scripts depend on the CIDR endpoints or the connections field.

Wrap-up

  • Two breaking changes hit the Zero Trust Networks / Cloudflare Tunnel API on October 5, 2026
  • CIDR-encoded route endpoints (/network/{ip_network_encoded}) are removed in favor of route_id-based endpoints
  • The connections field is removed from tunnel/mesh list and get responses
  • Check cloudflared, Terraform, and any custom scripts for dependencies on these before October 5

If you run Cloudflare Tunnel or Zero Trust Networks through the API or Terraform, it's worth checking this now.

Related posts