Announcing Cloudflare OHTTP Gateway – expanding access to Cloudflare’s privacy-preserving infrastructure

This post announces the launch of the Cloudflare OHTTP Gateway, a new managed service that acts as an OHTTP gateway. It details how the gateway integrates with existing Cloudflare zones, intercepts OHTTP requests at a specific endpoint, decrypts them using Hybrid Public Key Encryption (HPKE), forwards them to app servers as regular HTTP requests, and then encrypts the responses before returning them to the client. The post highlights the benefits of this managed service, including reduced latency due to global deployment on Cloudflare's edge network, automatic scaling, and simplified onboarding compared to self-hosting an OHTTP gateway. It also clarifies the distinction between the new OHTTP Gateway and the existing OHTTP Relay, emphasizing the separation of trust model.
More from the Privacy Protocol CLI Tooling trail
- We’re open sourcing our privacy proxy CLI
- Privacy Gateway: a privacy preserving proxy built on Internet standards
- Stronger than a promise: proving Oblivious HTTP privacy properties
- Private by design: building privacy-preserving products with Cloudflare's Privacy Edge
- Privacy-Preserving Compromised Credential Checking