{"id":"9ff635bba830d0d800529c87e12c896cb95f8506bcccc9323153da75f3bd8140","title":"Cloudflare services for private origins is now generally available","argument":"Cloudflare says its private origins service is now generally available, allowing customers to point a proxied DNS record at a private IP and route requests to the origin over existing Cloudflare One connectivity. The origin stays private, while Cloudflare says services including WAF, caching, bot management, and Workers work as they do for public origins. The change addresses a problem Cloudflare says customers raised: internal APIs, AI agent backends, MCP servers, and operational tools need to receive Internet requests without being built to face the Internet. Cloudflare says earlier approaches could require exposing a public IP, opening a firewall port, or running cloudflared alongside the origin. Access requires a Private Origins entitlement and Cloudflare One connectivity; some features remain unsupported or require Load Balancing. Cloudflare says work is underway on private-to-private traffic, with a closed beta targeted for early 2027.","topicIds":["power-and-infrastructure","institutions-and-trust"],"domain":"infrastructure","claimType":"attributed reading","limits":"Cloudflare says access requires a Private Origins entitlement, Cloudflare One connectivity, and Unified Routing unless connecting over Cloudflare Tunnel. The source names unsupported features and a requirement for origin health checks, but refers readers to developer documentation for the full list of current limitations. Private-to-private traffic is described as in development, with a closed beta targeted for early 2027; the source does not report results or a release date.","speaker":{"name":"Cloudflare","roleAtSource":"Publisher"},"source":{"title":"Cloudflare services for private origins is now generally available","publisher":"Cloudflare Blog","format":"Article","url":"https://blog.cloudflare.com/private-origins-public-to-private/","publishedAt":"2026-10-30T14:23:43.668Z","dateBasis":"Date stated by the publisher."},"evidence":[{"text":"Cloudflare says its private origins service is generally available and routes requests to a private IP over existing Cloudflare One connectivity.","excerpt":"Point a proxied DNS record at a private IP, and Cloudflare reaches the origin over your existing Cloudflare One connection.","url":"https://blog.cloudflare.com/private-origins-public-to-private/","relationship":"Source-stated"},{"text":"Cloudflare says the origin remains private while several application services work as they do for public origins.","excerpt":"Your origin stays private, while web application firewall (WAF), caching, bot management, and Workers work just as they do for public origins.","url":"https://blog.cloudflare.com/private-origins-public-to-private/","relationship":"Source-stated"},{"text":"Cloudflare says customers raised the need to let Internet users reach internal services that were not built to face the Internet.","excerpt":"Their internal APIs, AI agent backends, MCP servers, and operational tools weren’t built to face the Internet, but those services still need to accept requests from partners, customers, or agents over the Internet.","url":"https://blog.cloudflare.com/private-origins-public-to-private/","relationship":"Source-stated"},{"text":"Cloudflare says some features are unsupported, and origin health checks require Load Balancing.","excerpt":"Argo Smart Routing and Dedicated CDN Egress IPs aren’t supported, and origin health checks require Load Balancing.","url":"https://blog.cloudflare.com/private-origins-public-to-private/","relationship":"Source-stated"},{"text":"Cloudflare says it is working on private-to-private traffic and targets a closed beta in early 2027.","excerpt":"Engineering work is underway, and we’re targeting a closed beta in early 2027.","url":"https://blog.cloudflare.com/private-origins-public-to-private/","relationship":"Source-stated"}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","checkedAt":"2026-10-30T16:48:35.536Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01KW44TXMXRJ1NFA38CJB0MT3A.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","label":"BLOG-3230 Feature Image","verifiedAt":"2026-10-30T16:48:35.910Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Which application services or connectivity setups remain unsupported beyond the exclusions Cloudflare lists?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Cloudflare services for private origins is now generally available","summary":"Cloudflare says its private origins service is now generally available, allowing customers to point a proxied DNS record at a private IP and route requests to the origin over existing Cloudflare One connectivity. The origin stays private, while Cloudflare says services including WAF, caching, bot management, and Workers work as they do for public origins. The change addresses a problem Cloudflare says customers raised: internal APIs, AI agent backends, MCP servers, and operational tools need to receive Internet requests without being built to face the Internet. Cloudflare says earlier approaches could require exposing a public IP, opening a firewall port, or running cloudflared alongside the origin. Access requires a Private Origins entitlement and Cloudflare One connectivity; some features remain unsupported or require Load Balancing. Cloudflare says work is underway on private-to-private traffic, with a closed beta targeted for early 2027.","question":"Which application services or connectivity setups remain unsupported beyond the exclusions Cloudflare lists?","claims":[{"text":"Cloudflare says its private origins service is generally available and routes requests to a private IP over existing Cloudflare One connectivity.","excerpt":"Point a proxied DNS record at a private IP, and Cloudflare reaches the origin over your existing Cloudflare One connection.","support":"source-stated"},{"text":"Cloudflare says the origin remains private while several application services work as they do for public origins.","excerpt":"Your origin stays private, while web application firewall (WAF), caching, bot management, and Workers work just as they do for public origins.","support":"source-stated"},{"text":"Cloudflare says customers raised the need to let Internet users reach internal services that were not built to face the Internet.","excerpt":"Their internal APIs, AI agent backends, MCP servers, and operational tools weren’t built to face the Internet, but those services still need to accept requests from partners, customers, or agents over the Internet.","support":"source-stated"},{"text":"Cloudflare says some features are unsupported, and origin health checks require Load Balancing.","excerpt":"Argo Smart Routing and Dedicated CDN Egress IPs aren’t supported, and origin health checks require Load Balancing.","support":"source-stated"},{"text":"Cloudflare says it is working on private-to-private traffic and targets a closed beta in early 2027.","excerpt":"Engineering work is underway, and we’re targeting a closed beta in early 2027.","support":"source-stated"}],"limitations":["Cloudflare says access requires a Private Origins entitlement, Cloudflare One connectivity, and Unified Routing unless connecting over Cloudflare Tunnel.","The source names unsupported features and a requirement for origin health checks, but refers readers to developer documentation for the full list of current limitations.","Private-to-private traffic is described as in development, with a closed beta targeted for early 2027; the source does not report results or a release date."],"mediaId":"4d4206ade98bad0ac970dc4d8ebb8eb3b2ba0fe514bceec011b23a8848a9a3d4","correctionReason":null,"id":"9ff635bba830d0d800529c87e12c896cb95f8506bcccc9323153da75f3bd8140","publicationId":"d4c5fc2d-06f7-4bd6-8804-9420a072e969","version":1,"sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","sourceTitle":"Cloudflare services for private origins is now generally available","publisher":"Cloudflare","publishedAt":"2026-10-30T14:23:43.668Z","originalPublished":{"value":"2026-10-30T14:23:43.668Z","precision":"instant","basis":"publisher_page"},"firstObservedAt":"2026-10-30T14:24:36.880Z","createdAt":"2026-11-13T18:33:24.930Z","historical":true,"entityIds":["cloudflare"],"topicIds":["power-and-infrastructure","institutions-and-trust"],"media":[{"id":"4d4206ade98bad0ac970dc4d8ebb8eb3b2ba0fe514bceec011b23a8848a9a3d4","kind":"article","url":"https://blog.cloudflare.com/private-origins-public-to-private/","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-10-30T16:48:35.910Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."},{"id":"65a5418edd16b749bd90d092d970d23a0729f535ac7594025d4199daad855a4d","kind":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01KW44TXMXRJ1NFA38CJB0MT3A.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","label":"BLOG-3230 Feature Image","provenance":"publisher_page","verification":{"status":"verified","checkedAt":"2026-10-30T16:48:35.910Z","method":"publisher_association_and_head","contentType":"image/webp","cacheUntil":1793378915910},"recommendationReason":"Observed on the acquired publisher source; availability checked."}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","checkedAt":"2026-10-30T16:48:35.536Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01KW44TXMXRJ1NFA38CJB0MT3A.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","label":"BLOG-3230 Feature Image","verifiedAt":"2026-10-30T16:48:35.910Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"4d4206ade98bad0ac970dc4d8ebb8eb3b2ba0fe514bceec011b23a8848a9a3d4","confidence":0.94,"provider":"typesafe","model":"jev-1.13.0","inputHash":"ef5f84e9d7aa2dd81da24f601ecaff8b38151070c74197bf6c25e6141047c9aa","decidedAt":"2026-10-30T16:48:37.180Z"},"provenance":{"textHash":"24247e167cfacfe82789f2b11ce2c0fc3b8a6740057b9f5148855918eb6b7b31","observationId":"9211edbf8a1eee5c122206ceabcc5dfcb9a2664d57d68d7e6655af29e286fc01","retrievedAt":"2026-10-30T16:48:35.536Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"5c0ef6b8-892d-4dc3-8199-1417416973d8"},"reviewer":{"model":"gpt-6-luna","runId":"fcaf08d6-50b3-49d5-856c-37c8ec14aa03"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-13T18:33:24.930Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[],"authorRole":"article-author","hosts":[],"status":"missing","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Cloudflare Blog","url":null,"kind":"unknown","actorId":null},"role":"publisher","scope":{"kind":"publication","locator":null},"literalCredit":"Cloudflare Blog","status":"stated","provenance":{"basis":"article-publisher","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","locator":"document/html[1]/head[0]/script[56]@12058.publisher"},"assertionId":"eb62395290a97f1d8daefd03a735f0447ebd6cff94515d9b72a004f3edf5208b:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-30T16:48:35.536Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"eb62395290a97f1d8daefd03a735f0447ebd6cff94515d9b72a004f3edf5208b","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","contentSha256":"f50dafecfd5694965793a36867bef977e6dc7f2f54dc2f806feb655830465646","textHash":"24247e167cfacfe82789f2b11ce2c0fc3b8a6740057b9f5148855918eb6b7b31","observedAt":"2026-10-30T16:48:35.536Z"}}],"participationCoverage":{"total":1,"returned":1,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":{"name":"Cloudflare Blog","url":null},"sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","snapshotId":"eb62395290a97f1d8daefd03a735f0447ebd6cff94515d9b72a004f3edf5208b","contentSha256":"f50dafecfd5694965793a36867bef977e6dc7f2f54dc2f806feb655830465646","textHash":"24247e167cfacfe82789f2b11ce2c0fc3b8a6740057b9f5148855918eb6b7b31","observedAt":"2026-10-30T16:48:35.536Z","basis":"publisher-page-metadata","sourceLinks":31,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/9ff635bba830d0d800529c87e12c896cb95f8506bcccc9323153da75f3bd8140/source"}},"canonicalUrl":"https://escapemeridian.com/readings/cloudflare-services-for-private-origins-is-now-generally-9ff635bb","formats":{"html":"/readings/cloudflare-services-for-private-origins-is-now-generally-9ff635bb","markdown":"/readings/cloudflare-services-for-private-origins-is-now-generally-9ff635bb.md","json":"/readings/cloudflare-services-for-private-origins-is-now-generally-9ff635bb.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"conditions":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-api","name":"API","explanation":"An application programming interface: a defined way for software to request data or actions from another system.","referenceUrl":"https://developer.mozilla.org/en-US/docs/Glossary/API"},{"id":"term-ai-agent","name":"AI agent","explanation":"An AI system that chooses and carries out actions toward a goal, often using software tools.","referenceUrl":"https://www.ibm.com/think/topics/ai-agents"}],"entities":[{"id":"cloudflare","name":"Cloudflare","kind":"organization","context":"Cloudflare provides networking, security and computing services that help run websites and applications.","referenceUrls":["https://blog.cloudflare.com/"],"path":"/entities/cloudflare","json":"/entities/cloudflare.json","markdown":"/entities/cloudflare.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"9ff635bba830d0d800529c87e12c896cb95f8506bcccc9323153da75f3bd8140","revision":"d4c5fc2d-06f7-4bd6-8804-9420a072e969","revisionKind":"publication-id","title":"Cloudflare services for private origins is now generally available","url":"https://escapemeridian.com/readings/cloudflare-services-for-private-origins-is-now-generally-9ff635bb"},"source":{"type":"source","id":"https://blog.cloudflare.com/private-origins-public-to-private/","revision":"24247e167cfacfe82789f2b11ce2c0fc3b8a6740057b9f5148855918eb6b7b31","revisionKind":"sha256-source-text","title":"Cloudflare services for private origins is now generally available","url":"https://blog.cloudflare.com/private-origins-public-to-private/"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"9ff635bba830d0d800529c87e12c896cb95f8506bcccc9323153da75f3bd8140","title":"Cloudflare services for private origins is now generally available","argument":"Cloudflare says its private origins service is now generally available, allowing customers to point a proxied DNS record at a private IP and route requests to the origin over existing Cloudflare One connectivity. The origin stays private, while Cloudflare says services including WAF, caching, bot management, and Workers work as they do for public origins. The change addresses a problem Cloudflare says customers raised: internal APIs, AI agent backends, MCP servers, and operational tools need to receive Internet requests without being built to face the Internet. Cloudflare says earlier approaches could require exposing a public IP, opening a firewall port, or running cloudflared alongside the origin. Access requires a Private Origins entitlement and Cloudflare One connectivity; some features remain unsupported or require Load Balancing. Cloudflare says work is underway on private-to-private traffic, with a closed beta targeted for early 2027.","topicIds":["power-and-infrastructure","institutions-and-trust"],"domain":"infrastructure","claimType":"attributed reading","limits":"Cloudflare says access requires a Private Origins entitlement, Cloudflare One connectivity, and Unified Routing unless connecting over Cloudflare Tunnel. The source names unsupported features and a requirement for origin health checks, but refers readers to developer documentation for the full list of current limitations. Private-to-private traffic is described as in development, with a closed beta targeted for early 2027; the source does not report results or a release date.","speaker":{"name":"Cloudflare","roleAtSource":"Publisher"},"source":{"title":"Cloudflare services for private origins is now generally available","publisher":"Cloudflare Blog","format":"Article","url":"https://blog.cloudflare.com/private-origins-public-to-private/","publishedAt":"2026-10-30T14:23:43.668Z","dateBasis":"Date stated by the publisher."},"evidence":[{"text":"Cloudflare says its private origins service is generally available and routes requests to a private IP over existing Cloudflare One connectivity.","excerpt":"Point a proxied DNS record at a private IP, and Cloudflare reaches the origin over your existing Cloudflare One connection.","url":"https://blog.cloudflare.com/private-origins-public-to-private/","relationship":"Source-stated"},{"text":"Cloudflare says the origin remains private while several application services work as they do for public origins.","excerpt":"Your origin stays private, while web application firewall (WAF), caching, bot management, and Workers work just as they do for public origins.","url":"https://blog.cloudflare.com/private-origins-public-to-private/","relationship":"Source-stated"},{"text":"Cloudflare says customers raised the need to let Internet users reach internal services that were not built to face the Internet.","excerpt":"Their internal APIs, AI agent backends, MCP servers, and operational tools weren’t built to face the Internet, but those services still need to accept requests from partners, customers, or agents over the Internet.","url":"https://blog.cloudflare.com/private-origins-public-to-private/","relationship":"Source-stated"},{"text":"Cloudflare says some features are unsupported, and origin health checks require Load Balancing.","excerpt":"Argo Smart Routing and Dedicated CDN Egress IPs aren’t supported, and origin health checks require Load Balancing.","url":"https://blog.cloudflare.com/private-origins-public-to-private/","relationship":"Source-stated"},{"text":"Cloudflare says it is working on private-to-private traffic and targets a closed beta in early 2027.","excerpt":"Engineering work is underway, and we’re targeting a closed beta in early 2027.","url":"https://blog.cloudflare.com/private-origins-public-to-private/","relationship":"Source-stated"}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","checkedAt":"2026-10-30T16:48:35.536Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01KW44TXMXRJ1NFA38CJB0MT3A.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","label":"BLOG-3230 Feature Image","verifiedAt":"2026-10-30T16:48:35.910Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Which application services or connectivity setups remain unsupported beyond the exclusions Cloudflare lists?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Cloudflare services for private origins is now generally available","summary":"Cloudflare says its private origins service is now generally available, allowing customers to point a proxied DNS record at a private IP and route requests to the origin over existing Cloudflare One connectivity. The origin stays private, while Cloudflare says services including WAF, caching, bot management, and Workers work as they do for public origins. The change addresses a problem Cloudflare says customers raised: internal APIs, AI agent backends, MCP servers, and operational tools need to receive Internet requests without being built to face the Internet. Cloudflare says earlier approaches could require exposing a public IP, opening a firewall port, or running cloudflared alongside the origin. Access requires a Private Origins entitlement and Cloudflare One connectivity; some features remain unsupported or require Load Balancing. Cloudflare says work is underway on private-to-private traffic, with a closed beta targeted for early 2027.","question":"Which application services or connectivity setups remain unsupported beyond the exclusions Cloudflare lists?","claims":[{"text":"Cloudflare says its private origins service is generally available and routes requests to a private IP over existing Cloudflare One connectivity.","excerpt":"Point a proxied DNS record at a private IP, and Cloudflare reaches the origin over your existing Cloudflare One connection.","support":"source-stated"},{"text":"Cloudflare says the origin remains private while several application services work as they do for public origins.","excerpt":"Your origin stays private, while web application firewall (WAF), caching, bot management, and Workers work just as they do for public origins.","support":"source-stated"},{"text":"Cloudflare says customers raised the need to let Internet users reach internal services that were not built to face the Internet.","excerpt":"Their internal APIs, AI agent backends, MCP servers, and operational tools weren’t built to face the Internet, but those services still need to accept requests from partners, customers, or agents over the Internet.","support":"source-stated"},{"text":"Cloudflare says some features are unsupported, and origin health checks require Load Balancing.","excerpt":"Argo Smart Routing and Dedicated CDN Egress IPs aren’t supported, and origin health checks require Load Balancing.","support":"source-stated"},{"text":"Cloudflare says it is working on private-to-private traffic and targets a closed beta in early 2027.","excerpt":"Engineering work is underway, and we’re targeting a closed beta in early 2027.","support":"source-stated"}],"limitations":["Cloudflare says access requires a Private Origins entitlement, Cloudflare One connectivity, and Unified Routing unless connecting over Cloudflare Tunnel.","The source names unsupported features and a requirement for origin health checks, but refers readers to developer documentation for the full list of current limitations.","Private-to-private traffic is described as in development, with a closed beta targeted for early 2027; the source does not report results or a release date."],"mediaId":"4d4206ade98bad0ac970dc4d8ebb8eb3b2ba0fe514bceec011b23a8848a9a3d4","correctionReason":null,"id":"9ff635bba830d0d800529c87e12c896cb95f8506bcccc9323153da75f3bd8140","publicationId":"d4c5fc2d-06f7-4bd6-8804-9420a072e969","version":1,"sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","sourceTitle":"Cloudflare services for private origins is now generally available","publisher":"Cloudflare","publishedAt":"2026-10-30T14:23:43.668Z","originalPublished":{"value":"2026-10-30T14:23:43.668Z","precision":"instant","basis":"publisher_page"},"firstObservedAt":"2026-10-30T14:24:36.880Z","createdAt":"2026-11-13T18:33:24.930Z","historical":true,"entityIds":["cloudflare"],"topicIds":["power-and-infrastructure","institutions-and-trust"],"media":[{"id":"4d4206ade98bad0ac970dc4d8ebb8eb3b2ba0fe514bceec011b23a8848a9a3d4","kind":"article","url":"https://blog.cloudflare.com/private-origins-public-to-private/","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-10-30T16:48:35.910Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."},{"id":"65a5418edd16b749bd90d092d970d23a0729f535ac7594025d4199daad855a4d","kind":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01KW44TXMXRJ1NFA38CJB0MT3A.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","label":"BLOG-3230 Feature Image","provenance":"publisher_page","verification":{"status":"verified","checkedAt":"2026-10-30T16:48:35.910Z","method":"publisher_association_and_head","contentType":"image/webp","cacheUntil":1793378915910},"recommendationReason":"Observed on the acquired publisher source; availability checked."}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","checkedAt":"2026-10-30T16:48:35.536Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01KW44TXMXRJ1NFA38CJB0MT3A.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","label":"BLOG-3230 Feature Image","verifiedAt":"2026-10-30T16:48:35.910Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"4d4206ade98bad0ac970dc4d8ebb8eb3b2ba0fe514bceec011b23a8848a9a3d4","confidence":0.94,"provider":"typesafe","model":"jev-1.13.0","inputHash":"ef5f84e9d7aa2dd81da24f601ecaff8b38151070c74197bf6c25e6141047c9aa","decidedAt":"2026-10-30T16:48:37.180Z"},"provenance":{"textHash":"24247e167cfacfe82789f2b11ce2c0fc3b8a6740057b9f5148855918eb6b7b31","observationId":"9211edbf8a1eee5c122206ceabcc5dfcb9a2664d57d68d7e6655af29e286fc01","retrievedAt":"2026-10-30T16:48:35.536Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"5c0ef6b8-892d-4dc3-8199-1417416973d8"},"reviewer":{"model":"gpt-6-luna","runId":"fcaf08d6-50b3-49d5-856c-37c8ec14aa03"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-13T18:33:24.930Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[],"authorRole":"article-author","hosts":[],"status":"missing","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Cloudflare Blog","url":null,"kind":"unknown","actorId":null},"role":"publisher","scope":{"kind":"publication","locator":null},"literalCredit":"Cloudflare Blog","status":"stated","provenance":{"basis":"article-publisher","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","locator":"document/html[1]/head[0]/script[56]@12058.publisher"},"assertionId":"eb62395290a97f1d8daefd03a735f0447ebd6cff94515d9b72a004f3edf5208b:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-30T16:48:35.536Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"eb62395290a97f1d8daefd03a735f0447ebd6cff94515d9b72a004f3edf5208b","sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","contentSha256":"f50dafecfd5694965793a36867bef977e6dc7f2f54dc2f806feb655830465646","textHash":"24247e167cfacfe82789f2b11ce2c0fc3b8a6740057b9f5148855918eb6b7b31","observedAt":"2026-10-30T16:48:35.536Z"}}],"participationCoverage":{"total":1,"returned":1,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":{"name":"Cloudflare Blog","url":null},"sourceUrl":"https://blog.cloudflare.com/private-origins-public-to-private/","snapshotId":"eb62395290a97f1d8daefd03a735f0447ebd6cff94515d9b72a004f3edf5208b","contentSha256":"f50dafecfd5694965793a36867bef977e6dc7f2f54dc2f806feb655830465646","textHash":"24247e167cfacfe82789f2b11ce2c0fc3b8a6740057b9f5148855918eb6b7b31","observedAt":"2026-10-30T16:48:35.536Z","basis":"publisher-page-metadata","sourceLinks":31,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/9ff635bba830d0d800529c87e12c896cb95f8506bcccc9323153da75f3bd8140/source"}}}],"audits":[{"publicationId":"d4c5fc2d-06f7-4bd6-8804-9420a072e969","verdict":"uncertain","findings":[{"dimension":"attribution","status":"pass","explanation":"The reading consistently attributes the general-availability announcement, the customer problem, the limitations and the 2027 roadmap to Cloudflare. It does not present Cloudflare's assertions as established facts or as Escape Meridian's opinion.","excerpt":"Today, Cloudflare services for private origins is generally available."},{"dimension":"summary","status":"uncertain","explanation":"The summary is faithful, but a non-specialist reader may not follow it. It leaves central terms unexplained: origin (the server hosting the app), proxied DNS record, private IP, WAF (the summary never expands it), MCP servers, Cloudflare One and cloudflared. It also never says plainly why this matters for AI agent backends. Smallest repair: briefly gloss origin, private IP and WAF, and add tooltip entries for MCP and proxied DNS. The question is also narrow, since the documentation the source cites largely answers it.","excerpt":"Your origin stays private, while web application firewall (WAF), caching, bot management, and Workers work just as they do for public origins."},{"dimension":"date","status":"pass","explanation":"The originalPublished value (2026-10-30T14:23:43Z, from the publisher page) matches the feed entry and is consistent with the post's own 'Today' announcement framing. It refers to the June beta as an earlier event, so this is the first publication of this post.","excerpt":null},{"dimension":"support","status":"pass","explanation":"Each claim matches its verbatim excerpt. The access requirements, the unsupported features (Argo Smart Routing and Dedicated CDN Egress IPs), the Load Balancing requirement for health checks, and the early-2027 closed-beta target are all source-stated. The reading claims no demonstrated benefits or outcomes beyond Cloudflare's own statements.","excerpt":"Argo Smart Routing and Dedicated CDN Egress IPs aren’t supported, and origin health checks require Load Balancing."},{"dimension":"media","status":"pass","explanation":"The selected media ID is the verified direct link to the original Cloudflare blog post, which is the most direct way for readers to access the source.","excerpt":null}],"createdAt":"2026-11-13T18:33:24.930Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}