Zeema
New design
Catalogue / network-fabric

Cloudflare Mesh

cloudflareNetwork fabriccloudflare-mesh

Post-quantum encrypted private IP connectivity between enrolled servers and devices.

Provider
cloudflare
Kind
Network fabric
Category
Operations
Official docs
https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/
Properties · 3 set by this component
propertytypevaluesrequiredkind defaultthis component
interconnectenumpublic | private | cloud-backbonenopublic▸ cloud-backbone
kernelBypassboolean—nofalseinherited
managedboolean—nofalse▸ true
meshIpRange · component propertystring—no100.96.0.0/12inherited
multicastboolean—nofalseinherited
overlayboolean—nofalse▸ true
postQuantumEncryption · component propertyboolean—notrueinherited
tunnelProtocol · component propertyenummasque | wireguardnomasqueinherited
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "mesh", component: "cloudflare-mesh" }
Other Network fabric products · 69
Anycast Elastic IP Addressalibaba-anycast-eipalibabacloudnetwork-fabricCloud Enterprise Networkalibaba-cenalibabacloudnetwork-fabricElastic IP Addressalibaba-eipalibabacloudnetwork-fabricExpress Connectalibaba-express-connectalibabacloudnetwork-fabricGlobal Acceleratoralibaba-gaalibabacloudnetwork-fabricVirtual Private Cloudalibaba-vpcalibabacloudnetwork-fabricvSwitchalibaba-vswitchalibabacloudnetwork-fabricAWS Cloud WANaws-cloud-wanawsnetwork-fabricAWS Direct Connectaws-direct-connectawsnetwork-fabricDirect Connect gatewayaws-direct-connect-gatewayawsnetwork-fabricElastic IP addressaws-elastic-ipawsnetwork-fabricElastic network interfaceaws-elastic-network-interfaceawsnetwork-fabricAWS Interconnectaws-interconnectawsnetwork-fabricInternet gatewayaws-internet-gatewayawsnetwork-fabricVPC subnetaws-subnetawsnetwork-fabricAWS Transit Gatewayaws-transit-gatewayawsnetwork-fabricAmazon VPCaws-vpcawsnetwork-fabricAmazon VPC IP Address Manageraws-vpc-ipamawsnetwork-fabricVPC peering connectionaws-vpc-peeringawsnetwork-fabricAzure Enclaveazure-enclaveazurenetwork-fabricAzure ExpressRouteazure-expressrouteazurenetwork-fabricAzure Multicloud Interconnectazure-multicloud-interconnectazurenetwork-fabricAzure network interfaceazure-network-interfaceazurenetwork-fabricAzure Peering Serviceazure-peering-serviceazurenetwork-fabricPublic IP addressazure-public-ipazurenetwork-fabricAzure Relayazure-relayazurenetwork-fabricAzure Route Serverazure-route-serverazurenetwork-fabricAzure subnetazure-subnetazurenetwork-fabricAzure Virtual Networkazure-virtual-networkazurenetwork-fabricAzure Virtual WANazure-virtual-wanazurenetwork-fabricCloudflare Bring Your Own IPcloudflare-byoipcloudflarenetwork-fabricCloudflare Network Interconnectcloudflare-network-interconnectcloudflarenetwork-fabricCloudflare WANcloudflare-wancloudflarenetwork-fabricAntreaantreanetwork-fabricCisco routercisco-routernetwork-fabricCisco switchcisco-switchnetwork-fabricMulticast domainmulticast-domainnetwork-fabricGeneric network fabricnetwork-fabricnetwork-fabricngrokngroknetwork-fabricSpine-leaf fabricspine-leaf-fabricnetwork-fabric
and 29 more → Network fabric page
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Cloudflare Mesh: post-quantum encrypted private connectivity between servers running the
# Cloudflare One Client headless and enrolled devices. Every participant gets a Mesh IP out of
# 100.96.0.0/12 and all traffic passes through Cloudflare ("Cloudflare Mesh").
schemaVersion: "1"
type: "component"
id: "cloudflare-mesh"
kind: "network-fabric"
provider: "cloudflare"
docs: "https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/"
defaults:
  managed: true
  overlay: true
  interconnect: "cloud-backbone"
properties:
  tunnelProtocol:
    type: "enum"
    values: ["masque", "wireguard"]
    default: "masque"
  meshIpRange:
    type: "string"
    default: "100.96.0.0/12"
  postQuantumEncryption:
    type: "boolean"
    default: true

The same page as markdown, for an agent: /catalogue/components/cloudflare-mesh.md