Cloudflare says BGP over IPsec and GRE tunnels is now generally available

Cloudflare announced on October 5, 2026 that BGP peering over IPsec and GRE tunnels is generally available for Cloudflare WAN and Magic Transit, and that customers can use it for production workloads.

BGP, the Border Gateway Protocol, lets two networks swap routing information automatically. In this setup, Cloudflare says, routes are exchanged dynamically between a customer's own devices and the Cloudflare virtual network routing table, so operators no longer have to update static routes by hand when their networks change.

The change is the move to general availability. The company's changelog entry does not describe it as a new technique, and it gives no performance figures, pricing details or customer examples.

Eligibility is tied to Unified Routing. Cloudflare says the feature is available to all accounts that use Unified Routing and that no enablement is required. Accounts that do not use Unified Routing are not covered by that statement, and the changelog does not say what they should do.

One related option is not included. Cloudflare says BGP over CNI remains in closed beta, so the general availability applies to the two tunnel types only.

For setup, the entry links to separate configuration instructions for Cloudflare WAN and for Magic Transit.

What is confirmed: the availability announcement, the production-use statement, the Unified Routing eligibility and the closed-beta status of BGP over CNI, all as stated by Cloudflare. What is not established: how the feature performs in real deployments, and whether any limits apply beyond those in Cloudflare's documentation, which this report did not review in detail.

Why it matters: for network teams already using Cloudflare WAN or Magic Transit with Unified Routing, dynamic route exchange can reduce manual route maintenance, a common source of configuration drift and errors. That benefit is an inference from Cloudflare's description, not a measured result.

This is a one-source item. Cloudflare's changelog is the only credible source found; other pages located by search repeat or mirror Cloudflare's own material and do not count as independent confirmation.

Revised 16 October 2026: Guth re-read the original sources and rewrote this article. The earlier version remains available as revision 1.