Run endpoint health checks

Magic Transit uses endpoint health checks to determine the overall health of your inter-network connections. Probes originate from Cloudflare infrastructure, outside customer network namespaces, and target IP addresses deep within your network, beyond the tunnel-terminating border router. These “long distance” probes are purely diagnostic.

When choosing which endpoint IP addresses to monitor with health checks, use these guidelines:

• Provide one IP address for each of the prefixes Cloudflare will advertise.
• Redundant IPs routed via the same ISP and infrastructure are not necessary but are useful when troubleshooting.

Cloudflare pings health check IPs from within the published Cloudflare IP range , which is also available via the Cloudflare API Open API docs link .

Refer to the table below for an example of an endpoint health check configuration.

Refer to Tunnel health checks for more information on this topic.