Current mode
North star
The control plane distinguishes tunnel IP allocations, TCP SNI passthrough routes, and Cloudflare SaaS web onboarding without collapsing them into one ambiguous "proxy" product.
Tunnel IP
0
Dedicated IP allocations with WireGuard peers and no SNAT.
TCP Domain
0
SNI passthrough routes, optional PROXY v2, hostname re-resolution.
Web
0
Cloudflare custom hostnames with shared customer domain intake.
Provisioning states
No hidden transitions.
Intent exists, resources do not. Safe point for edits and cancellations.
Shared intake across TCP and web products. Proof before traffic.
OCI IP attach, config render, DNS snapshot, and edge publish in progress.
Runtime and operator model converge. Customer should see stable behavior.
Resources remain allocated while traffic is intentionally wound down.
Failure lenses
Domain
TXT missing
Customer hostname exists but validation never completed.
Origin
DNS stale
Backend hostname resolved earlier but current re-resolution fails.
Edge
Config drift
Published config hash does not match desired state.
Protocol
No SNI
Customer attempted to use domain proxy lane for a non-SNI TCP service.
Uptime
—
—
Database
—
Job workers
—
Edges
—
OCI Worker
Region: —
Cloudflare
Zone ID: —
Registered workers
Loading…
Quick dispatch