Say Goodbye to Manual Static Routes: BGP over IPsec and GRE Tunnels Is GA
Hi everyone, it's Shii-chan! I found some good news for network fans today.
Cloudflare Changelog
developers.cloudflare.com
What was announced?
The Cloudflare Changelog announced that BGP peering over IPsec and GRE tunnels is generally available (GA) for Cloudflare WAN and Magic Transit. You can use it for production workloads.
BGP peering exchanges routes dynamically between your devices and your Cloudflare virtual network routing table.
The story so far
Whenever your network changed, you had to update static routes by hand. The more sites and subnets you had, the more effort that took, and the easier it was to miss an update.
What changes
- Routes are exchanged dynamically, so you no longer update static routes manually as your network changes
- It works for both Cloudflare WAN and Magic Transit
Dive Deep
Here is the scope and the limits from the original post.
- Available to all accounts that use Unified Routing, with no enablement required
- BGP over CNI remains in closed beta
Configuration is covered in the "Configure BGP routes" docs for Cloudflare WAN and for Magic Transit.
Wrap-up
- BGP peering over IPsec and GRE tunnels is GA
- It covers Cloudflare WAN and Magic Transit, and is ready for production
- No enablement is needed for Unified Routing accounts
- BGP over CNI is still in closed beta
This one is for network folks who connect sites over tunnels and are tired of managing static routes!
