#modal-topnav { display:none; }

Magic WAN

Redefine your corporate network

Magic WAN replaces legacy WAN architectures with Cloudflare’s network, providing global connectivity, cloud-based security, performance, and control through one simple user interface.

Talk to an Expert

"Increased cloud adoption coupled with the recent pivot to remote workers has increased the volume of Internet, SaaS, and IaaS traffic, straining traditional network architectures such as MPLS. WAN architectures that offer a global scale, integrated enterprise network security functions, and direct, secure connectivity to remote users are key to organizations looking to increase their operational agility and lower total costs of ownership."

Ghassan Abdo

IDC Research VP, WW Telecom, Virtualization & CDN

The problem with legacy WAN architectures

Legacy WAN architectures were never designed to deliver the security, millisecond performance, and reliability required for businesses today.

To address the core limitations and vulnerabilities of traditional WAN architectures, enterprises have had to cobble together a patchwork of proprietary circuits and network appliances that are expensive to install and difficult to manage.

"Our network team is excited by Magic WAN. Cloudflare has built a global network-as-a-service (NaaS) platform that will help network teams manage complex edge and multi-cloud environments much more efficiently. Operating a single global WAN with built-in security and fast routing functionality — regardless of the HQ, data center, branch office, or end user location — is a game-changer in WAN technology."

Sander Petersson

Head of Infrastructure

The new paradigm for networking

Magic WAN, the connectivity foundation of Cloudflare One, is a comprehensive, cloud-based network-as-a-service solution that is designed to be secure, fast, and reliable by default.

It replaces a patchwork of appliances and expensive, proprietary circuits with a single global network that provides built-in:

All delivered and managed as-a-service.

Explore Cloudflare network services

Replace MPLS between branch offices & data centers

Connect your on-prem data centers, branch offices, and cloud-hosted workloads to Cloudflare over Anycast GRE tunnels, direct network connections, and Argo Tunnel.

Route traffic privately over Cloudflare's global network
Get the inherent benefits of Cloudflare — faster performance, built-in security, and increased resiliency
All easily managed from a single dashboard

It’s like hub-and-spoke, but the “hub” is now everywhere that the Cloudflare network is. Get the performance advantages of full-mesh, but with the simplicity and reduced management overhead of classic hub-and-spoke.

Secure remote employee access to private networks — without VPNs

With Cloudfare One, Cloudflare for Teams and Magic WAN provide a secure way for your employees to access resources behind private networks, wherever they're working.

Instead of sending all remote traffic through a single choke point device (such as VPN concentrators at your corporate network “perimeter”), traffic is routed to the Cloudflare edge location closest to the source. Access policies are applied before that remote traffic is sent over optimal secure paths to its destination.

Apply comprehensive, consistent security policies wherever your users are, all managed from a single unified control plane.

Strengthen your security posture — while retiring legacy hardware

Magic WAN comes with Magic Firewall, a built-in software-defined network firewall that is part of the Cloudflare suite of network security solutions. Apply packet filters for ingress and egress traffic based on parameters like source and destination IP and port, packet length, and bit field match. Rules are deployed instantly across all locations.

You may also layer additional security functionality such as DNS filtering, SWG with remote browser isolation, DDoS protection, and much more — all delivered and managed as-a-service. Learn more about secure network connectivity with Magic WAN and Magic Firewall.

"Cloudflare has built one of the world’s most interconnected networks. And to have built-in DDoS protection, traffic acceleration, network firewall, and zero trust functionality, over Cloudflare’s global IP network that can be managed using a single management plane — is arguably the biggest leap in enterprise network technology in the last couple of decades."

Enguerrand Gave

Head of Portals & Services

No more boxes. Simply connect to Cloudflare and leave the rest to us.

Teams gateway build for the cloud spot illustration

Unlike legacy hardware vendors with “virtual” versions of their hardware appliances, Cloudflare is fully software-defined and cloud-native, so there is no need to add physical or virtual gateways to your environment. You can start using Magic WAN with your existing network infrastructure — no rip-and-replace required.

Simply configure connectivity from your existing edge router/gateway (physical or cloud-hosted) to Cloudflare’s network and get the connectivity and inherent security, performance, and reliability benefits over our network for all your traffic between your users and locations.

"Digital transformation has challenged traditional network architectures, leading to clunky bolt-on security practices that simply do not work for today’s global enterprises. As more intelligence moves to the edge, enterprises must leverage modern WAN technologies that offer a broad range of built-in cloud-delivered security services. Fast edge global connectivity with robust security inherently included is what enterprises really want today."

Christopher Rodriguez

IDC Research Manager, Cybersecurity Products

Cloudflare’s global network is now your private WAN

Cloudflare operates one of the world’s largest networks with data centers spanning over 270 cities in 100 countries. Our network is carrier-agnostic, exceptionally well-connected and peered, and delivers the same set of services from every global point of presence (PoP).

Customers may also choose to interconnect their networks to Cloudflare over direct, dedicated physical or virtual connections with Cloudflare Network Interconnect for enhanced performance & reliability.

Trusted by millions of Internet properties

View case studies