How Cloudflare uses Cloudflare Spectrum: A look into an intern’s project at Cloudflare

What this post added

This post details an intern's project to improve the usability of Cloudflare Spectrum for internal services. The core contribution was the integration of Spectrum's origin IP validation with the internal Addressing API. This allowed internal customers to use Cloudflare-managed IP addresses as Spectrum origins by checking for delegations within the Addressing API, bypassing the previous manual Salt configuration process. The project also involved removing Spectrum's internal deny network database and ensuring that Spectrum edge IPs are not used as origins to prevent cycles. Performance implications of the new API call were analyzed using OpenTracing.