Cloudflare WAN Now Lets You Pick a Processing Region for Gateway HTTP Inspection
Hi everyone, it's Shii-chan! Here's a Cloudflare WAN update for anyone who cares about where their data is processed!
Cloudflare Changelog
developers.cloudflare.com
What was announced?
The Cloudflare Changelog announced that Cloudflare WAN now supports a Gateway processing region (Regional Services).
Why it matters
Some organizations must decide in which region sensitive traffic is processed. This feature supports those data sovereignty goals.
What changes
HTTPS traffic may enter a Cloudflare data center outside your selected region. It stays encrypted until Gateway forwards it to the region you chose, and TLS decryption and HTTP inspection happen there.
Dive Deep
How it works and what it needs:
- Traffic can enter through an IPsec tunnel, a GRE tunnel, or Direct CNI
- It stays encrypted until decryption and inspection
- Unified routing is required
- The processing region applies only to Gateway HTTP traffic, not to Gateway DNS or network policy processing
- To configure it, contact your account team
For supported regions and limitations, see the "Data residency for Cloudflare One" documentation.
Wrap-up
- You can set a Gateway processing region for Cloudflare WAN
- Decryption and HTTP inspection happen in the region you pick
- Unified routing is required, and it covers HTTP only (not DNS or network policies)
This one is for network teams with data residency or sovereignty requirements!
