CLOUDFLARE SERVICES FOR PRIVATE ORIGINS IS NOW GENERALLY AVAILABLE

Summary from the TLDR DevOps newsletter

Cloudflare can now route public requests to private origin IPs over existing Cloudflare One connectivity while applying WAF, caching, bot management, and Workers. Origins retain private addresses without inbound firewall exceptions. Setup requires account enablement, supported connectivity, and appropriate return routes.