Cloudflare services for private origins is now generally available

Cloudflare's services for private origins are now generally available, letting customers point a proxied A or AAAA record at a private IP so Cloudflare reaches the origin over existing Cloudflare One connectivity while WAF, caching, bot management, and Workers apply as they do for public origins. The private_routing setting enables automatically for RFC 1918, RFC 6598 CGNAT, and RFC 4193 IPv6 ranges, and no inbound firewall exception is required. Argo Smart Routing and Dedicated CDN Egress IPs are not supported, and origin health checks require Load Balancing.