Internal Service Exposure & Management with Spectrum
Route public traffic to private applications with Cloudflare

Route public traffic to private applications with Cloudflare

6/10/2026 · Enrique Somoza, Steve Welham, Shruti Mittal

What this post added

Introduces 'Application Services for Private Origins' in closed beta, allowing public traffic to be routed to private origins without exposing them to the public internet. This enables Cloudflare's security, performance, and programmability services (WAF, bot management, rate limiting, caching, rewrites, Workers) for private applications. Extends this capability to Spectrum for Layer 4 TCP/UDP services and integrates with Workers VPC. The feature leverages existing private network connectivity like Cloudflare Tunnel, WAN, and Mesh. API support includes a `use_private_routing` flag on DNS records and `virtual_network_id` for Spectrum.

Read the original post ↗