San Francisco – October 24, 2026 -- Cloudflare will accept private network interconnect (PNI) requests only from networks that exchange more than 10 Gbps of peak traffic with it in a single location, according to its peering policy dated December 1, 2025.
Cloudflare applies an open peering policy across 335 cities
AS13335 runs a global anycast network spanning more than 335 cities in over 125 countries. Cloudflare will peer with networks that share a presence in mutual locations, and it may grant exceptions to the policy.
All peers must run 24x7 NOCs and secure BGP sessions
Every peer must keep a complete, current PeeringDB entry listing accurate peering locations, IPv4 and IPv6 prefix limits and contact details. Cloudflare uses the record for automated provisioning and network notifications. Peers must also operate a 24x7 Network Operations Center that responds to peering issues.
Cloudflare expects adherence to BCP-38 and robust route filtering based on a well-defined route-set or AS-SET. It strongly recommends RPKI validation and RPKI ROAs for peers' own routes.
PNI ports are limited to Nx100G LR4 and new 10G links are discouraged
Cloudflare supports Nx100G LR4 interconnections and typically does not allow new 10G connections. It does not currently support 100G LR1 or 400G. Both parties must upgrade port capacity in a timely manner to avoid congestion.
Cloudflare supplies a letter of authorization (LOA) and point-to-point addresses for the cross connect. Requests must include the ASN, desired locations and traffic estimates.
Public peering runs through an automated portal with PeeringDB authentication
Public peering is handled through the Cloudflare Peering Portal, which authenticates users via PeeringDB OIDC. Cloudflare recommends sessions in all mutual locations and BGP sessions on every available IP address at an exchange where a peer has several.
It also recommends bilateral BGP sessions, because it advertises only a limited number of prefixes over route servers.
Networks above 10 Gbps may qualify for embedded caches
Networks exchanging at least 10 Gbps with Cloudflare may be eligible for its embedded cache program. Smaller networks can sometimes be accommodated.
Cloudflare keeps the right to change terms or cut sessions without notice
Cloudflare reserves the right to alter its policy at any time and to accept or decline any request for any reason. It may suspend, without notice, any connection with severe quality-of-service issues, and it may terminate any peering connection at any time.