---
type: "post"
id: "cloudflare-services-for-private-origins-is-now-generally-6aaa5f"
slug: "cloudflare-services-for-private-origins-is-now-generally-6aaa5f"
title: "Cloudflare services for private origins is now generally available"
description: "Cloudflare has made its services for private origins generally available."
retrieval_nugget: "Cloudflare has made its services for private origins generally available. Customers with Cloudflare One connectivity can send public web traffic to a private-IP origin while keeping Cloudflare’s WAF, caching, bot controls, rules, and Workers in front of it. For teams exposing agent backends or MCP servers, this changes the network boundary rather than the application itself."
published_at: "2026-10-30"
updated_at: "2026-10-30"
record_date: "2026-10-30"
date_kind: "published_at"
topics: ["mcp"]
entities: ["Cloudflare","Cloudflare One","Cloudflare WAN","Cloudflare Mesh","Cloudflare Workers","Argo Smart Routing","Aegis","Cloudflare Load Balancing"]
related_patterns: ["agent-security-moves-to-runtime-boundaries"]
novelty_label: "new_fact"
what_changed: "Cloudflare’s private-origin services have reached general availability, a release not covered by the archive’s unrelated Cloudflare product GA announcements."
prior_refs: []
source_url: "https://blog.cloudflare.com/private-origins-public-to-private"
source_urls: ["https://blog.cloudflare.com/private-origins-public-to-private"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:cloudflare-services-for-private-origins-is-now-generally-6aaa5f"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/cloudflare-services-for-private-origins-is-now-generally-6aaa5f/","markdown":"https://newruntime.com/posts/cloudflare-services-for-private-origins-is-now-generally-6aaa5f.md","json":"https://newruntime.com/posts/cloudflare-services-for-private-origins-is-now-generally-6aaa5f.json"}
---

# Cloudflare services for private origins is now generally available

## Retrieval answer

Cloudflare has made its services for private origins generally available. Customers with Cloudflare One connectivity can send public web traffic to a private-IP origin while keeping Cloudflare’s WAF, caching, bot controls, rules, and Workers in front of it. For teams exposing agent backends or MCP servers, this changes the network boundary rather than the application itself.

## Summary

Cloudflare has made its services for private origins generally available. Customers with Cloudflare One connectivity can send public web traffic to a private-IP origin while keeping Cloudflare’s WAF, caching, bot controls, rules, and Workers in front of it. For teams exposing agent backends or MCP servers, this changes the network boundary rather than the application itself.

## What happened

Cloudflare announced on October 30, 2026 that services for private origins are generally available. The release lets a customer point a proxied DNS record at a private IP address and have Cloudflare reach that origin over an existing Cloudflare One connection. The origin can remain on a private address even though it receives requests originating from the public Internet.

Cloudflare describes the target use cases as internal APIs, AI-agent backends, MCP servers, and operational tools. These services may need to receive requests from partners, customers, or agents, but were not designed to be directly exposed to the Internet. Before the closed beta, Cloudflare says placing its services in front of such an application generally meant using a public IP, opening an inbound firewall port, or operating `cloudflared` next to the origin.

With the GA release, Cloudflare’s application services are intended to behave as they do for public origins. The company lists WAF and managed rules, bot management, rate limiting, caching, transform and rewrite rules, and Workers. TLS termination, WAF processing, rules, and caching continue to run on Cloudflare’s network. The stated access requirement is Cloudflare One connectivity; the announcement does not describe a separate per-feature price.

Configuration starts with a proxied A or AAAA DNS record that points to the origin. For supported private IP ranges, the “Use private network routing” setting is enabled automatically. An origin with a public IP that is reachable only through a private network can use the setting manually. Cloudflare says that no inbound firewall exception is needed. Customers using Cloudflare WAN or Cloudflare Mesh also do not need connector software running on the origin.

The release retains limitations. Argo Smart Routing and Aegis are not supported for private origins, and origin health checks require Cloudflare Load Balancing. Cloudflare directs readers to its developer documentation for the full current limitations list. The product had been in closed beta since June, when eligible customers had to request access through an account team; the GA announcement says access is now opened beyond that group.

## What the archive adds

We have not covered this before; it opens a new thread.

## Trend signal

This supports the pattern that [agent security moves to runtime boundaries](https://newruntime.com/patterns/agent-security-moves-to-runtime-boundaries/). The announcement is not an agent-security product by itself, but it treats network reachability and enforcement services as the boundary around an agent backend or MCP server, rather than relying on the application becoming publicly exposed or on prompt-level constraints.

## Why now

Cloudflare says it introduced the capability in closed beta in June after hearing that customers needed to expose private services to partners, customers, and agents. General availability removes the prior account-team access path and makes the configuration available beyond the beta cohort.

## Why it matters

A team building an agent-facing service often faces an awkward choice: make the service publicly reachable, operate a separate connector, or keep it inaccessible to external callers. Cloudflare’s release offers another architecture for organizations already using Cloudflare One: retain private addressing and route public requests through the existing Cloudflare edge.

That can be useful where an MCP server or agent backend needs familiar web controls before traffic reaches the service. WAF rules, rate limits, bot management, caching, rewrites, and Workers can remain in the request path. It does not remove the need for application authentication, authorization, or safe tool design, but it can reduce the infrastructure changes needed to put a controlled public entry point in front of a private service.

## Limits and uncertainty

The announcement is a product description from Cloudflare, not an independent security assessment or a performance study. It does not establish latency, throughput, pricing, regional availability, supported private ranges, or the operational behavior of every Cloudflare One configuration. It also does not state that private origins solve identity or authorization for agents; preserving a private IP and applying edge controls are different from deciding which agent or user may invoke a service. Teams should consult the linked developer documentation before treating the feature as a substitute for access-control design.

## Skill to build now

Map every internal endpoint that may need external agent, partner, or customer access. For each one, record its DNS name, origin address type, existing Cloudflare One path, required WAF and rate-limit policy, and whether health checks are needed. That inventory will reveal whether a proxied private-origin record is viable and whether the current limitations—especially Load Balancing for health checks—block the design.

## Reader takeaway

Cloudflare One customers can now put selected private-origin services behind a public Cloudflare hostname without assigning them a public IP or opening an inbound firewall exception. For agent backends and MCP servers, the immediate opportunity is to expose a controlled edge entry point while preserving private network placement.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Mcp](https://newruntime.com/topics/mcp.md): Explore the mcp topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)