Cloudflare adds BGP import and export filtering to its IPsec and GRE tunnels
On 15 October 2026, Cloudflare added reusable BGP filter profiles to Cloudflare WAN and Magic Transit IPsec and GRE tunnels, applied without resetting the BGP session. If you announce prefixes through Cloudflare, build an allow-list export filter now to prevent route leaks.