Connect and secure any private or public app by hostname, not IP — free for everyone in Cloudflare One
Sep 18, 2025Nikita Cano, Sharon Goldberg
Summary
Introduced hostname-based routing for Cloudflare Tunnel, enabling users to route traffic to private and public applications based on hostname or domain instead of IP addresses. This simplifies Zero Trust policy creation and management by eliminating the need for brittle IP lists and allowing for per-resource authorization. The feature is integrated with Cloudflare Access and Gateway policies for HTTPS and non-HTTP applications respectively.
More from the Internal Service Exposure & Management with Spectrum trail
- Route public traffic to private applications with Cloudflare
- Secure private networking for everyone: users, nodes, agents, Workers — introducing Cloudflare Mesh
- How Automatic Return Routing solves IP overlap
- A QUICker SASE client: re-building Proxy Mode
- How Workers VPC Services connects to your regional private networks from anywhere in the world