Announcing Anycast IPsec: a new on-ramp to Cloudflare One
Dec 6, 2021Annika Garbers, Michael Vanderwater, Arég Harutyunyan
Summary
This post introduces IPsec as a new on-ramp to Cloudflare One, enabling customers to securely connect their networks and devices to Cloudflare's global network using a widely supported encryption protocol. It addresses the limitations of traditional IPsec architectures (hub-and-spoke, mesh) by leveraging Cloudflare's Anycast network to provide a single, globally distributed IPsec tunnel. This enhances security by encrypting all traffic, including legacy applications, and improves performance by eliminating latency associated with centralized hubs. The implementation integrates deeply with the Cloudflare One suite, offering unified security, performance, and reliability.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack