Cloudflare makes BGP over IPsec and GRE tunnels generally available

Cloudflare says its BGP peering option for IPsec and GRE tunnels has reached general availability on Cloudflare WAN and Magic Transit, including for production use. The routing method exchanges routes between network devices and Cloudflare's virtual network routing table, allowing routes to adjust as networks change instead of requiring manual static-route updates. Eligibility covers all accounts using Unified Routing, and no separate enablement is needed. BGP over CNI, however, remains in closed beta. Cloudflare's announcement also points customers to separate setup instructions for Cloudflare WAN and Magic Transit. This gives eligible network operators access to dynamically exchanged routes over the two tunnel types for production workloads, while CNI users remain outside general availability.