Using Cloudflare Access with CNI

What this post added

This post introduces a new method for protecting hosted applications using Cloudflare Access in conjunction with Cloudflare Network Interconnect (CNI) and Aegis. This approach allows for Zero Trust policies to be enforced without requiring installed software or custom code on application servers. Aegis provides a dedicated, Cloudflare-sourced IP address for inbound traffic, enabling origin applications to enforce network-level firewall policies and ensure that only authenticated Access calls from Cloudflare can reach the application. This effectively air-gaps the service from direct public internet access, offering a more secure alternative to traditional VPNs and Cloudflare Tunnel for certain use cases.