Architecture
JD Cloud PoPs run Cloudflare's software stack inside China. Your settings sync automatically — no separate configuration required. Chinese users hit local PoPs; global users use Cloudflare's anycast network.
China Network
CU · CT · CM
Product Suite
China Network is the CDN and security layer. Global Acceleration extends connectivity — and also brings Cloudflare One Client and Cloudflare WAN into China independently.
Serve Chinese users from inside China
Cloudflare's full CDN, WAF, DDoS protection, and performance suite — running on JD Cloud infrastructure inside Mainland China. Users hit local PoPs, eliminating cross-border latency for cached content.
- CDN & edge caching within China
- Web Application Firewall (WAF)
- DDoS mitigation at local PoPs
- SSL/TLS termination in China
- Bot Management
- Analytics & Log Push
Reliable cross-border connectivity for dynamic content
A dedicated private link between JD Cloud PoPs and your origin for dynamic, uncacheable content — solving unreliable cross-border legs that affect API calls, authentication, and personalized content.
- Dedicated cross-border private link
- Stable dynamic content delivery
- Exit options: HKG, NRT, FRA
- 2-week PoC available
Extend Cloudflare One Client into China
Extend Cloudflare One Client to employees in Mainland China via the Global Acceleration program — no VPN, no complexity, full Zero Trust policy enforcement.
- Cloudflare One Client in China
- Full Zero Trust policy enforcement
- Independent of China Network
Extend Cloudflare WAN into China
Extend Cloudflare WAN to your China office locations. A partner-managed CPE device is shipped on-site, providing cross-border connectivity with network policies applied at the edge.
- Cloudflare WAN in China offices
- Partner-managed CPE on-site
- GRE, IPsec, or L2TP tunnels
- Flexible bandwidth sizing
Which product do you need?
| Use case | Product | ICP? | Requires China Network? |
|---|---|---|---|
| Serve a website or API from within China with CDN & security | China Network | Yes | — |
| Speed up dynamic/uncacheable cross-border content | CDN Global Acceleration | Yes | Yes (add-on) |
| Extend Cloudflare One Client to employees in China | CF1 Client GA | No | No |
| Connect a China office to your global WAN | CF WAN GA | No | No |
Capabilities
CDN & edge caching
Serve static assets from PoPs inside China. HTML, images, JS, CSS — delivered locally with zero cross-border wait.
WAF & DDoS protection
Managed WAF rules and DDoS mitigation run at local PoPs. Threats are stopped before they cross the border.
DNS resolution in China
Authoritative DNS resolves within China for Chinese users. In-China DNS mode available for maximum performance.
SSL/TLS & HTTP/3
TLS terminates at local China PoPs. HTTP/3 with QUIC is supported at JD Cloud data centers in China.
Bot Management
Enterprise Bot Management is available in China Network with ML-based detection and heuristics. JS challenge and managed challenge are supported.
Analytics & Log Push
China traffic appears in your standard dashboard. Drill down via Analytics → HTTP Traffic → Data Centers. Log Push to your SIEM.
Compliance & Security
China Network meets China's regulatory requirements while preserving Cloudflare's security and privacy standards.
ICP Licensing
A valid ICP license at the root domain is required before China Network can be enabled. Subdomains inherit the ICP from the apex.
example.cn ICP requiredapi.example.cn Inherits from apexNo ICP yet? We can refer you to ICP application partners.
Data Residency & Access
Logs are stored in the US or EU — not in Mainland China. JD Cloud has access to datacenter facilities and hardware only. Cloudflare exclusively controls the software stack and all customer data. All access events are audited via a JIT access system.
MLPS Level 3
Adheres to MLPS (Multi-Layer Protection Scheme) Level 3 standards and China's Data Security Law (DSL) — the compliance frameworks required for sensitive workloads in China.
Content Vetting
JD Cloud reviews zone content before activation. Your Cloudflare account team will coordinate the submission and timeline.
Onboarding
Verify active zone on Enterprise plan, confirm valid ICP at root domain, check origin reachability from China.
Submit to JD Cloud for content review. Domain must be publicly accessible or a content description provided.
Cloudflare enables the China Network module and JDC Network Access. A 24-hour sync period begins.
After sync completes ("Assigned, ready for traffic"), JDC Network Traffic is enabled. DNS returns JDC unicast IPs for queries from China.
Configure DNS mode, Argo Smart Routing, and whitelist JDC egress IPs on your origin. Monitor from your Cloudflare dashboard.
Get Started
China Network is available on Enterprise plans. Review the documentation, or talk to our China Network team about a proof of concept. Default PoC duration is 2 weeks.