Skip to content

[Cloudflare WAN, Magic Transit] Country rules now supported in Unified Routing #30643

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
patriciasantaana merged 2 commits into from
May 7, 2026
+17 −1
Merged

[Cloudflare WAN, Magic Transit] Country rules now supported in Unified Routing #30643

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
4ee9fda
[Cloudflare WAN, Magic Transit] Remove GeoIP/Country rules from Unifi…
cloudflare-hajer May 6, 2026
f994fdf
[Cloudflare WAN, Magic Transit] Remove Country rules from beta limita…
cloudflare-hajer May 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions ...ent/changelog/cloudflare-wan/2026-04-21-unified-routing-geoip-country-rules.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
title: Country rules supported in Unified Routing
description: Cloudflare Advanced Network Firewall Country rules now work with Unified Routing mode.
date: 2026-04-21T12:00:00
products:
- cloudflare-network-firewall
- magic-transit
---

[Cloudflare Advanced Network Firewall](/cloudflare-network-firewall/) Country rules are now supported for accounts using [Unified Routing](/cloudflare-wan/reference/traffic-steering/#unified-routing-mode-beta) mode. This feature requires a Cloudflare Advanced Network Firewall subscription.

You can create firewall rules that match traffic based on source or destination country to enforce geographic access policies across your network.

This is the first of the Cloudflare Advanced Network Firewall features to become available in Unified Routing. Support for additional features - IP Lists, ASN Lists, Threat Intel Lists, IDS, Rate Limiting, SIP, and Managed Rulesets - is planned.

For the full list of current beta limitations, refer to [Traffic steering beta limitations](/cloudflare-wan/reference/traffic-steering/#beta-limitations).
2 changes: 1 addition & 1 deletion src/content/partials/networking-services/reference/traffic-steering.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -276,7 +276,7 @@ The following limitations apply to accounts using Unified Routing mode. This lis
| Network analytics | Not yet fully supported |
| Basic packet captures | Captures exclude Automatic Return Routing or BGP-over-tunnels traffic |
| Full packet captures | Not yet supported |
| Advanced Cloudflare Network Firewall features: GeoIP/Country rules, IP Lists, ASN Lists, Threat Intel Lists, IDS, Rate Limiting, SIP, Managed Rulesets | Not yet supported |
| Cloudflare Advanced Network Firewall features: IP Lists, ASN Lists, Threat Intel Lists, IDS, Rate Limiting, SIP, Managed Rulesets | Not yet supported |
| Gateway filtering rules | Not supported on traffic where both the onramp and offramp is IPsec/GRE/CNI |
| Load Balancer | Public-to-private use case is supported to IPsec/GRE/CNI destinations. Private-to-private use case does not yet support Cloudflare Source IPs |

Expand Down
Loading