1.1.1.1 - Free, Safe, Fast DNS & VPN Service (Enable WARP+ with MASQUE Protocol)

Cloudflare introduced free WARP service to provide faster and safer internet connection solution to all consumers since 2019. It is based on WireGuard tunnel protocol to create a secure tunnel between user's device and one of global Cloudflare data centers near to the user. 

In this blog post, I am gonna show you how to get it and how it can be used to bypass firewall or application's region restricution.

Download and Install Client

https://one.one.one.one/

127.0.0.0/8 (127.0.0.0 to 127.255.255.255) is a local host IP address, that works only on your local machine. WARP creates a local DNS server listening on 127.0.2.2 and 127.0.2.3 to route DNS queries over the WARP tunnel. This is nothing to worry about and just how WARP works.

Enable WARP+

1. Create Team Domain from Zero Trust portal

If you already created one, you will be able to find your Team domain from custom page. 

2. From Authentication page, go to WARP authentication identity settings:

3. Add a rule for Device  enrollment permissions

4. The simplest rule is to create one "emails ending in" rule to allow certain domain to use your Zero Trust service.

5. Save the configuration, then log in using Zero Trust from your WARP client

Switching Protocols

Enable 1.1.1.1 with WARP 

Switch to MASQUE

1. install warp on windows

2. open cmd:

3. warp-cli registration delete

4. warp-cli registration new

5. warp-cli tunnel protocol set MASQUE

6. connect! :)

to set it back to standard protocol, use following command:

• warp-cli tunnel protocol set WireGuard

Type CMD from File Explorer's address bar: C:\Program Files\Cloudflare\Cloudflare WARP

Use following command to search current protocol settings:

• warp-cli settings | find "protocol"

To enable MASQUE protocol, we are going to change the settings in the WARP Client:

Change default profile's settings:

Switch from WireGuard to MASQUE

Reconnect your WARP client to fetch this configuration change.

Verify

https://www.whatismyip.com/

https://www.iqiyi.com/v_1ml7j6plhcc.html

Some Error Information

There are too many devices active for this license. A maximum of 5 devices per license is allowed.

Only for WARP, not for WARP+

xc0X98o7-PX75A6S3-QY64C3I8

1C609yWv-4bu9y5o3-yg1q8B93

C73h82qU-Q97qk0x5-b96AT05t

f23VdJ05-7A3cH8E0-b6LY3E29

75Xlkg28-6F7Y04TW-872n5asz

WARP Gen project in replit.com : https://replit.com/@cloudflaregith1/YouTube-Ke-Ji-Gong-Xiang-warp-key-generator#main.py

Video

References

What is the difference between WARP, WARP+, and WARP+ Unlimited? – 1.1.1.1 (cloudflarewarp.com)

Donning a MASQUE: building a new protocol into Cloudflare WARP

Zero Trust WARP: tunneling with a MASQUE (cloudflare.com)
Zero Trust WARP Client Changelog (cloudflare.com)