
12/6/2021 · Annika Garbers, Michael Vanderwater, Arég Harutyunyan
What this post added
This post introduces IPsec as a new on-ramp to Cloudflare One, enabling customers to securely connect their networks and devices to Cloudflare's global network using a widely supported encryption protocol. It addresses the limitations of traditional IPsec architectures (hub-and-spoke, mesh) by leveraging Cloudflare's Anycast network to provide a single, globally distributed IPsec tunnel. This enhances security by encrypting all traffic, including legacy applications, and improves performance by eliminating latency associated with centralized hubs. The implementation integrates deeply with the Cloudflare One suite, offering unified security, performance, and reliability.