---
title: WARP Connector · Cloudflare Zero Trust docs
description: "Cloudflare WARP Connector (beta) is a software client1 that
  enables site-to-site, bidirectional, and mesh networking connectivity without
  requiring changes to underlying network routing infrastructure. WARP Connector
  establishes a secure Layer 3 proxy between a private network and Cloudflare,
  allowing you to:"
lastUpdated: 2025-09-16T17:43:27.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/private-net/warp-connector/
  md: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/private-net/warp-connector/index.md
---

Feature availability

| [WARP modes](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/) | [Zero Trust plans](https://www.cloudflare.com/teams-pricing/) |
| - | - |
| Gateway with WARP | All plans |

| System | Availability |
| - | - |
| Windows | ❌ |
| macOS | ❌ |
| Linux | ✅ |
| iOS | ❌ |
| Android | ❌ |
| ChromeOS | ❌ |

Note

WARP Connector is not currently supported in accounts that have [Magic WAN](https://developers.cloudflare.com/magic-wan/) enabled.

Cloudflare WARP Connector (beta) is a software client[1](#user-content-fn-1) that enables site-to-site, bidirectional, and mesh networking connectivity without requiring changes to underlying network routing infrastructure. WARP Connector establishes a secure Layer 3 proxy between a private network and Cloudflare, allowing you to:

* Connect two or more private networks to each other.
* Connect IoT devices that cannot run external software, such as printers and IP phones.
* Filter and log server-initiated traffic, such as VoIP and SIP traffic.
* Apply Zero Trust security policies based on the source IP of the request.

![Two subnets connected with WARP Connector](https://developers.cloudflare.com/_astro/overview.CRSzOP-1_2tbbeT.webp)

As shown in the diagram, WARP Connector acts as a router for a subnet within the private network to on-ramp and off-ramp traffic through Cloudflare. All devices on the subnet can access any services connected to Cloudflare, and all devices connected to Cloudflare can access any services on the subnet. Each subnet runs a WARP Connector on a designated Linux machine (typically the [default gateway router](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/private-net/warp-connector/site-to-internet/#3-route-traffic-from-subnet-to-warp-connector)), but other devices on the network do not need to install software.

To set up WARP Connector, refer to the guide for your use case:

* **[Site-to-Internet](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/private-net/warp-connector/site-to-internet/)**: Send requests from your private network to the Internet.
* **[Site-to-site](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/private-net/warp-connector/site-to-site/)**: Send requests between two or more private networks.
* **[User-to-site](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/private-net/warp-connector/user-to-site/)**: Allow WARP client devices to send requests to your private network.
* **Internet-to-site**: Not supported by WARP Connector. To provide clientless access to applications on your private network, set up a [Cloudflare Tunnel with `cloudflared`](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/get-started/create-remote-tunnel/) and configure a [published application](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/).

## Footnotes

1. WARP Connector is an extension of the [WARP client](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/). [↩](#user-content-fnref-1)
