Skip to content
Cloudflare Docs

Cloud CNI

Cloud Interconnect allows you to connect your virtual private cloud (VPC) virtual networks directly with Cloudflare — for a more reliable and secure experience.

Connecting to Cloudflare directly with a Cloud Interconnect reduces latency, makes your network more stable by bypassing Internet performance potential bottlenecks, and will often reduce your cloud provider network egress bandwidth charges. The use case for Cloud Interconnect is Magic WAN.

Supported cloud providers

Cloudflare supports interconnect with:

  • Amazon Web Services (AWS) Direct Connect
  • Google Cloud (GCP) Interconnect

Azure ExpressRoute support is coming soon.

Cloud Interconnect Setup

Enterprise customers using Magic WAN can get started with Cloud Interconnect by contacting their account team.

AWS Direct Connect (beta)

If you are a Magic WAN customer, you can connect to AWS Direct Connect ↗ using Cloud Interconnect. Currently, Cloud Interconnect only supports Dedicated Direct Connect, not Hosted Direct Connect. A Dedicated AWS Direct Connect involves a full physical port allocation in AWS, whereas a Hosted AWS Direct Connect uses a VLAN on a shared port between AWS and Cloudflare.

For your AWS Direct Connect, you can choose between connection speeds of 10 Gbps or 1 Gbps.

To connect to AWS Direct Connect:

  1. Contact your account team to start the Cloud Interconnect provisioning process. Your team will let you know of available interconnect locations so you can choose the best one for you, as well as all the details involved in this process.
  2. Log in to your AWS portal and order a Direct Connect.
  3. AWS will provide you a Letter of Agency (LOA) — sometimes referred to as a Letter of Authorization — and a VLAN ID that you need to send to your account team.
  4. Your account team will continue the process of provisioning your Cloud Interconnect with the AWS documents you have provided. Overall, this process should take around four weeks to finish.

Google Cloud interconnect (beta)

  1. Log in to the Cloudflare dashboard ↗, and select your account.
  2. Select Interconnects > Create new.
  3. Under Cloud CNI select Create new .
  4. Under Google Integration, select Select integration.
  5. Give your interconnect a name and optionally a description. Make sure the MTU value matches the MTU configured on the GCP VLAN attachment ↗.
  6. Select Continue.
  7. From the Interface speed dropdown menu, select an Interface speed. GCP will charge you based on the speed of the interconnect that you choose.
  8. Enter your VLAN attachment pairing key ↗.
  9. Select Continue.
  10. Review the details you provided and select Confirm order.

Your Google Cloud Platform (GCP) interconnect will take a few minutes to be available. A BGP session will be established but no routes will be exchanged.

GCP next steps

You can now select View interconnects for a list of all interconnects on your account. Select the interconnect name to show the interconnect details. The interconnect has a unique Interconnect ID.

After you have configured your Google Cloud Interconnect, you will need to add routes to use the interconnect:

  • To create routes in the Magic routing table to direct traffic towards GCP:
  • To create routes in GCP routing table to direct traffic towards Cloudflare, you must use the GCP Cloud Router:
    • Add custom learned routes to Cloud Router ↗.
    • Use the BGP session. Reach out to your account team to request a list of one or more prefixes to advertise, and specify the interconnect ID you want to advertise over.