The integration is available on all Cloudflare Zero Trust plans.
A Forward action in Gateway HTTP policies can invoke a customer Worker for matching, permitted traffic, without a separate proxy. Cloudflare says the Worker can transform HTTP requests or responses, return a coaching page, or run background tasks such as Slack notifications and R2 captures. It receives the request plus Gateway context, including connection metadata and, when available, user identity and device posture.
Gateway continues to operate the proxy connection, TLS decryption, and upstream routing. It evaluates HTTP request policies before Forward policies, inspects the original request body before it reaches the Worker, and can interrupt the Worker if body inspection returns a Block decision. Gateway also inspects the final response before returning it to the user.
The changelog does not state beta exit timing, plan-specific limits, or any separate price for the feature.