Cloudflare Docs
Magic Transit
Edit this page
Give us feedback
Set theme to dark (⇧+D)

Run endpoint health checks

Magic Transit uses endpoint health checks to determine the overall health of your inter-network connections. Probes originate from Cloudflare infrastructure, outside customer network namespaces, and target IP addresses deep within your network, beyond the tunnel-terminating border router. These “long distance” probes are purely diagnostic.

When choosing which endpoint IP addresses to monitor with health checks, use these guidelines:

  • Provide one IP address for each of the prefixes Cloudflare will advertise.
  • Redundant IPs routed via the same ISP and infrastructure are not necessary but are useful when troubleshooting.

Cloudflare pings health check IPs from within the published Cloudflare IP range, which is also available via the Cloudflare API.

Refer to the table below for an example of an endpoint health check configuration.

PrefixEndpoint IP address
103.21.244.0/24103.21.244.100
103.21.245.0/24103.21.245.100

Refer to Tunnel health checks for more information on this topic.