TechiSeek

VendorsFor Vendors

Cloudflare services for private origins is now generally available

Cloudflare Blog

Cloudflare services for private origins is now generally available News

Cloudflare services for private origins is now generally available, opening access beyond the closed beta group. You can point a proxied DNS record at a private IP, and Cloudflare reaches the origin over your existing Cloudflare One connection—so the origin stays private while WAF, caching, bot management, and Workers apply as they do for public origins.

Main capabilities

  • WAF and managed rules
  • Bot management
  • Rate limiting
  • Caching
  • Transform and rewrite rules
  • Workers
  • TLS termination, WAF, rules, and caching continue to run on Cloudflare's network

Practical use cases

  • AI agent backends
  • MCP servers

Technical specifications

  • Create a proxied A or AAAA record pointing to your origin; private network routing is enabled automatically for supported private IP ranges
  • With Cloudflare WAN, no connector software on the origin is required; with Cloudflare Mesh, a connector runs within your private network and can serve multiple origins

Limitations

  • Argo Smart Routing and Dedicated CDN Egress IPs aren't supported
  • Origin health checks require Load Balancing
  • If requests time out and nothing arrives at the origin, check the return route first—a missing route for Cloudflare's source range was the most common setup failure in beta
Visit Site

Recommended

What took the Internet offline in Q3 2026What took the Internet offline in Q3 2026Cloudflare Blog Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLangCross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLangCloudflare Blog Sentry Structured Logs Now Available to AllSentry Structured Logs Now Available to AllSentry Linux Foundation: Why Open Source Needs Research NowLinux Foundation: Why Open Source Needs Research NowThenewstack Sentry Announces AI Code Review: With New AI-Powered Feature, Developers Can Now Stop Bugs BeforeSentry Cloud Security Trends & Challenges: Complete GuideCloud Security Trends & Challenges: Complete GuideCybersecurity Exchange NoSQLNow! 2014 Case Study: Bleacher Report on Redis LabsNoSQLNow! 2014 Case Study: Bleacher Report on Redis LabsRedis Redis Cloud PrivateRedis Cloud PrivateRedis Grafana Is Not Worried About AWS CommercializationGrafana Is Not Worried About AWS CommercializationThenewstack DevSecOps: Why Security Shouldn’t be Sacrificed for SpeedDevSecOps: Why Security Shouldn’t be Sacrificed for SpeedThenewstack Oso Unbundles Security AuthorizationOso Unbundles Security AuthorizationThenewstack Pulumi ESC Table Editor Now Supports Dynamic Credential and Secret IntegrationsPulumi ESC Table Editor Now Supports Dynamic Credential and Secret IntegrationsPulumi Discovered Stacks: One Place for All Your InfrastructureDiscovered Stacks: One Place for All Your InfrastructurePulumi Pulumi Neo Now Supports AGENTS.mdPulumi Neo Now Supports AGENTS.mdPulumi New Policy as Code Capabilities with CrossGuardNew Policy as Code Capabilities with CrossGuardPulumi Introducing: H100s on ModalIntroducing: H100s on ModalModal Modal SDKs for JavaScript and Go (alpha)Modal SDKs for JavaScript and Go (alpha)Modal The Serverless Backend for Analytics: Introducing MotherDuck’s Native Integration on VercelThe Serverless Backend for Analytics: Introducing MotherDuck’s Native Integration on VercelMotherduck Docker Desktop 4.23: Updates to Docker Init, New Configuration Integrity Check, Quick SearchDocker Desktop 4.23: Updates to Docker Init, New Configuration Integrity Check, Quick SearchDocker ESLINT_CONFIGURATIONESLINT_CONFIGURATIONVercel