Multi-Cloud Networking (formerly Magic Cloud Networking) (beta) allows you to create on-ramps from your cloud networks to Cloudflare WAN (formerly Magic WAN). Cloudflare will create virtual private network (VPN) tunnels between Cloudflare WAN and your cloud provider, configuring both sides of the connection on your behalf. Cloudflare orchestrates the cloud provider's native VPN functionality, without requiring deployment of any additional compute virtual machines (VMs).
There are two types of on-ramps: single virtual private cloud (VPC) and hubs.
Before creating on-ramps from your cloud networks to Cloudflare WAN, make sure you:
- Have a Multi-Cloud Networking account. Contact your account team to learn more.
- Went through the process of setting up your cloud provider.
- Have the correct cloud resources. Refer to Reference to check resources by cloud provider.
Multi-Cloud Networking has the following cloud on-ramps integrations:
- AWS (single VPC and hubs)
- Azure (single VPC)
- GCP (single VPC)
Refer to Reference to learn more about how Cloudflare orchestrates VPN connectivity to your cloud networks.
Choose this option if you have a single VPC in your cloud to connect to Cloudflare WAN. To set up a single-VPC on-ramp:
-
Go to the Connectors page.
Go to Connectors ↗ -
Select the Cloud (beta) tab.
-
Select Add new on-ramp.
-
Go to Connect an existing VPC to Cloudflare > Select.
-
Give your new on-ramp a name and a description (optional), then select Continue.
-
From the drop-down menu, choose your cloud provider. You can choose between AWS, GCP, and Azure. Then, select Continue.
-
Select the network that you want to connect to. This list comes from the cloud integrations you have already set up. When you are done, select Continue.
-
Configure route propagation shows where Cloudflare will install the new routes. Installing these routes is required to correctly configure both Cloudflare WAN and your cloud provider, and ensure successful communication between them:
-
Add routes for your Cloudflare WAN address space to your cloud network: Select this option to install routes for reaching Cloudflare WAN in your cloud network's route tables (refer to Cloudflare WAN address space to learn what routes are installed and how to customize them). If you prefer to do this manually, unselect this option.
-
Add routes for your cloud network to Cloudflare WAN: Select this option to create routes for reaching your cloud network in Cloudflare WAN.
-
-
Select Continue. Applying your settings might take a few seconds to complete.
-
Review the changes in your cloud environment, and select Approve changes.
You have successfully created your Cloudflare WAN on-ramp. However, on-ramp creation can take up to an hour before you can use it.
If you want to connect multiple VPCs to Cloudflare WAN, the best way to connect them is using a hub. A hub is a cloud VPN gateway that peers with multiple VPCs, allowing them to share a VPN tunnel to Cloudflare WAN. Each cloud provider has their own term for hubs, so refer to your cloud provider for more information.
Depending on how you have set up your cloud provider, you can:
- Connect to an existing hub: Choose this option if you already have a VPN hub in your cloud and you want to connect it to Cloudflare WAN.
- Create a new hub: Choose this option if you want to create a new hub and connect it to Cloudflare WAN.
When you configure a hub on-ramp, Cloudflare always manages the VPN tunnel between Cloudflare WAN and the hub. Optionally, you can also choose to have Cloudflare manage peering with VPCs and/or with other hubs:
- Manage VPC peering: If you enable this option, Cloudflare will attach your chosen VPCs to the hub.
- Manage hub peering: Hubs are regional, so in order to connect VPCs attached to hubs in different regions, those hubs need to be peered. If you enable this option, Cloudflare will peer your chosen hubs to this hub.
-
Go to the Connectors page.
Go to Connectors ↗ -
Select the Cloud (beta) tab.
-
Select Add new on-ramp.
-
Go to Connect an existing hub to Cloudflare > Select.
-
Give your new on-ramp a name and a description (optional), then select Continue.
-
From the drop-down menu, choose your cloud provider. You can choose between AWS, GCP, and Azure. Then, select Continue.
-
Choose an existing hub. This list comes from the cloud integrations you have already set up. When you are done, select Continue.
-
(Optional) In VPC peering configuration, you can enable Manage VPC peering. This allows Cloudflare to attach your chosen VPCs to the hub:
- Select Manage VPC peering to enable this feature.
- Choose the VPCs you want Cloudflare to attach to the hub.
-
Select Continue.
-
(Optional) In Configure hub peering, you can enable Manage hub peering. Enabling this option allows Cloudflare to attach remote hubs you have chosen to this hub (establishing connectivity between VPCs attached to any of the peered hubs):
- Select Manage hub peering to enable this feature.
- Select the remote hubs you want Cloudflare to attach to this hub.
-
Select Continue.
-
Configure route propagation shows where Cloudflare will install the new routes. Installing these routes is required to correctly configure both Cloudflare WAN and your cloud provider, and ensure successful communication between them:
-
Add routes for your Cloudflare WAN address space to your cloud network: Select this option to install routes for reaching Cloudflare WAN in your cloud network's route tables (refer to Cloudflare WAN address space to learn what routes are installed and how to customize them). If you prefer to do this manually, unselect this option.
-
Add routes for your cloud network to Cloudflare WAN: Select this option to create routes for reaching your cloud network in Cloudflare WAN.
-
-
Select Continue. Applying your settings might take a few seconds to complete.
-
Review the changes in your cloud environment, and select Approve changes.
You have successfully created your Cloudflare WAN on-ramp. However, on-ramp creation can take up to an hour before you can use it.
-
Go to the Connectors page.
Go to Connectors ↗ -
Select the Cloud (beta) tab.
-
Select Add new on-ramp.
-
Go to Create a new hub & connect it to Cloudflare > Select.
-
Give your new on-ramp a name and a description (optional), then select Continue.
-
Configure your cloud in Select your cloud details:
- From the drop-down menu, choose your cloud provider. You can choose between AWS, GCP, and Azure.
- Choose an existing integration. This list comes from the cloud integrations you have already set up.
- Choose a region in which to create the new hub.
- Select Continue.
-
(Optional) In VPC peering configuration, you can enable Manage VPC peering. This allows Cloudflare to attach your chosen VPCs to the hub:
- Select Manage VPC peering to enable this feature.
- Choose the VPCs you want Cloudflare to attach to the hub.
-
Select Continue.
-
(Optional) In Configure hub peering, you can enable Manage hub peering. Enabling this option allows Cloudflare to attach remote hubs you have chosen to this hub (establishing connectivity between VPCs attached to any of the peered hubs):
- Select Manage hub peering to enable this feature.
- Select the remote hubs you want Cloudflare to attach to this hub.
-
Select Continue.
-
Configure route propagation shows where Cloudflare will install the new routes. Installing these routes is required to correctly configure both Cloudflare WAN and your cloud provider, and ensure successful communication between them:
-
Add routes for your Cloudflare WAN address space to your cloud network: Select this option to install routes for reaching Cloudflare WAN in your cloud network's route tables (refer to Cloudflare WAN address space to learn what routes are installed and how to customize them). If you prefer to do this manually, unselect this option.
-