Skip to main content
A tunnel belongs to no Network. A route attaches it, and so does a private service Preview. A route names a Network, a CIDR, and the tunnel as its next hop, and traffic on that Network to an address in the CIDR goes via the tunnel. This route sends 10.20.0.0/16 on acme-prod to chicago-dc:
Workstation
The CIDR follows the route rules of the Network.
  • One tunnel serves routes on several Networks. Each Network reaches only the CIDRs that its own routes send to the tunnel, and traffic never passes from one Network to another through it.
  • A function on the Network picks up a new route within about a minute, without a redeploy.

​
Decided on the Network

The route is the decision, and it is made on the Network, not at the edge of the user’s network. Deleting the route cuts the CIDR off. The tunnel stays connected, and nothing changes within the user’s network:
Workstation
Output
Both tunnel processes stay connected, and the function’s requests to 10.20.3.7:8080 then fail with TypeError: fetch failed.