Releasesby IbisCloudflare WAN, Magic Transit, Cloudflare One - BGP route filtering for IPsec and GRE tunnels
UpdateyesterdayUnverifiedAdded Oct 16, 2026
Cloudflare WAN and Magic Transit IPsec and GRE tunnels now support BGP import and export filtering. Create reusable filter profiles that specify an allow or deny action and a list of Classless Inter-Domain Routing (CIDR) targets with exact, more-specific, or prefix-length matching. Each tunnel supports one import filter and one export filter.
Topics: BI, Developer tools
More Cloudflare developer platform releases
Every Cloudflare developer platform releaseCloudflare One, Gateway - Application Library now supports custom applications
Starting today, you can create custom applications in the Application Library and reference them in Gateway DNS, Network, and HTTP policies. You can define an application with hostnames, IP subnets, or both. Then, optionally add TCP or UDP ports or port ranges to restrict HTTP and Network matching.
Cloudflare One - Validate data loss prevention matches with Cloudflare Workers
Data loss prevention (DLP) custom pattern entries can use Cloudflare Workers in your account to validate matches with organization-specific logic. Your Worker can adjust a match's confidence or reject the match. For setup steps and the Worker contract, refer to Validate data loss prevention matches with Cloudflare Workers .
Cloudflare One, Workers, Gateway - Gateway and Workers integration is now in public beta
Cloudflare Gateway now integrates with Cloudflare Workers in public beta on all Zero Trust plans. You can use the Forward action in Gateway HTTP policies to run your own code on matching, permitted traffic without managing a separate proxy.
Stream - Ultra-low latency live with WebRTC is now Generally Available in Stream
Stream WebRTC support ↗︎ lets you deliver high quality live video to thousands of concurrent viewers in milliseconds. WebRTC is compatible with native Web APIs and standard protocols, so creators can go live from a browser ↗︎ without needing a separate broadcast application.
Workers AI, Realtime - Pipecat PhoneLLM Mini now available on Workers AI
@cf/daily-co/phonellm-mini-alpha-2 , a model from the Pipecat ↗︎ team at Daily, is now available on Workers AI . PhoneLLM is built for voice agents and other realtime AI applications, where a model has to reply quickly and call the right tool mid-conversation.
Cloudflare One, Access - Infrastructure applications support a configurable session duration
Infrastructure applications now have a configurable session duration with a default value of 24 hours. You can set the session duration when creating or editing an infrastructure application in the dashboard or via the API.
DNS - Configure Advanced Custom Nameservers with nameserver sets (beta)
Nameserver sets are now available in beta to Enterprise accounts. A nameserver set groups two to five custom nameserver names with Cloudflare-assigned IP addresses. You can assign the set to zones in the same account. Enterprise customers using Cloudflare DNS can create Advanced Custom Nameserver sets.
Rules - Remove surrounding bytes with trim functions
Cloudflare Rules supports three new functions for removing surrounding bytes. Use them to remove whitespace before comparing request values. All HTTP products support these functions on all plans: trim() removes bytes from both ends. trim_start() removes bytes from the start. trim_end() removes bytes from the end.
Also shipped on Oct 15, 2026
Cloudflare in October 2026Checkout footer visibility now applies to merchant-configurable content
The visibility fields on CheckoutBrandingFooterContent and CheckoutAndAccountsConfigurationBrandingFooterContent now control only merchant-configurable footer content. Checkout can display Shopify-provided transaction information in the footer regardless of this setting.
ShopifyYou can copy tables across regions
You can copy tables across regions . This feature is now generally available (GA).
You can now use column aliases in GoogleSQL
You can now use column aliases in GoogleSQL. This feature lets you define an alias for an expression in the SELECT clause of a SQL query and immediately reference that alias within the same SELECT list or in the WHERE clause of the same query block.
You can export a conversational analytics agent's answer , including text, visualizations, tables, and...
You can export a conversational analytics agent's answer , including text, visualizations, tables, and citations, to a PDF or CSV file. This feature is generally available (GA).
ADBC driver for Power BI is now generally available
The Arrow Database Connectivity (ADBC) driver for the Databricks connector for Power BI is now generally available. ADBC is the default driver for new connections in Power BI Desktop and the Power BI service. See Configure ADBC or ODBC driver for Power BI .
Gemini Enterprise: Anthropic models are available in the Gemini Enterprise app
Administrators can make Anthropic models, Claude Opus 5.5 and Claude Sonnet 5.5, available to users in the Gemini Enterprise app. After an administrator turns on a model in the Enable third-party models section of the Feature Management tab, users can select the model in the model selector.