From 4b20ee00144214bc5dc39ebcf788cbc254a27448 Mon Sep 17 00:00:00 2001 From: ttsagklas Date: Fri, 23 Oct 2026 10:34:44 +0000 Subject: [PATCH] Update routing-and-bgp.mdx Replace this: For ingress-only or direct server return configurations, route return traffic through your tunnels with this: For ingress-only configurations (aka Direct Server Return or DSR), route return traffic through your ISPs and ensure they are not using uRPF strict mode. --- .../docs/magic-transit/troubleshooting/routing-and-bgp.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/magic-transit/troubleshooting/routing-and-bgp.mdx b/src/content/docs/magic-transit/troubleshooting/routing-and-bgp.mdx index 1458e39e1d7..c87018ca59b 100644 --- a/src/content/docs/magic-transit/troubleshooting/routing-and-bgp.mdx +++ b/src/content/docs/magic-transit/troubleshooting/routing-and-bgp.mdx @@ -97,7 +97,7 @@ This section covers BGP peering sessions between your network and Cloudflare, es 1. **Wait for propagation**: Allow up to five minutes for full global propagation. Changes propagate across Cloudflare quickly but external networks update at varying speeds. -2. **Verify return path routing**: Ensure your network has routes to send return traffic back through Cloudflare for egress configurations. For ingress-only or direct server return configurations, route return traffic through your tunnels. +2. **Verify return path routing**: Ensure your network has routes to send return traffic back through Cloudflare for egress configurations. For ingress-only configurations (aka Direct Server Return or DSR), route return traffic through your ISPs and ensure they are not using uRPF strict mode. 3. **Check external visibility**: Use BGP looking glass tools such as [bgp.he.net](https://bgp.he.net) or [RIPE RIS](https://ris.ripe.net/) to confirm your prefix is visible from external networks. 4. **Verify RPKI configuration**: If you use Resource Public Key Infrastructure (RPKI), confirm your Route Origin Authorization (ROA) records match your prefix and the ASN configuration in Cloudflare.