Get started

Before you can begin using Magic Transit, be sure to complete the onboarding steps below. Cloudflare can significantly accelerate this timeline during active-attack scenarios.

​​ ​​1. Scope your configuration

The onboarding process begins with an initial kickoff call where Cloudflare engages with your organization to confirm the scope and timeline for setting up Magic Transit.

After your call with Cloudflare, complete the prerequisites.

​​ ​​2. Configure tunnels

Configure the tunnels on both the Cloudflare side and your router side to connect to your origin infrastructure.

​​ 3. Configure static routes

Configure static routes to route traffic from Cloudflare’s global network to your locations.

​​ 4. Run pre-flight checks

After setting up your tunnels and static routes, Cloudflare validates tunnel connectivity, tunnel and endpoint health checks, Letter of Agency (LOA), Internet Routing Registry (IRR), and maximum segment size (MSS) configurations. Configurations for Cloudflare global network are applied and take around one day to rollout.

​​ 5. Advertise prefixes

Once pre-flight checks are completed, Cloudflare will unlock your prefixes for you to advertise via the dashboard, API or BGP at a time of your choosing. Refer to Dynamic advertisement best practices to learn more about advertising prefixes.

If you are using a Cloudflare IP, you do not need to advertise your prefixes.