Phase 3: Virtual Subnet & Anycast IPs

After Conduit Configuration

The system automatically generates:

1. Virtual Subnet (/31 for each tunnel)

• Internal use only (not shared with customer)
• Used for GRE tunnel private IP addressing
• Example: 10.25.2.0/31 (CF side: 10.25.2.0, Customer: 10.25.2.1)

2. Anycast IPs (2 IPs by default)

• Shared with customer for GRE tunnel destinations
• Anycast from all Cloudflare PoPs
• Examples: 162.159.64.235, 172.64.240.235