FeatureFeb 13, 2026

Origin CA certificate support for Workers VPC

Workers VPCCloudflare · Developer platform

Workers VPC now supports Cloudflare Origin CA certificates when connecting to your private services over HTTPS. Previously, Workers VPC only trusted certificates issued by publicly trusted certificate authorities (for example, Let's Encrypt, DigiCert).

With this change, you can use free Cloudflare Origin CA certificates on your origin servers within private networks and connect to them from Workers VPC using the https scheme. This is useful for encrypting traffic between the tunnel and your service without needing to provision certificates from a public CA.

For more information, refer to Supported TLS certificates.

Read the original announcement

All Workers VPC updates →

Identify Mesh, Workers VPC, and Cloudflare Tunnel replicas in network logs
You can now tell a person on a laptop apart from a Mesh node or an AI agent running on Workers, without matching on connector email addresses or Mesh IP ranges — and see exactly which Cloudflare Tunnel and cloudflared replica received each session.
Workers VPCFeatureSep 29, 2026
TCP connections via connect() over VPC Networks
VPC Network bindings now support the connect() Socket API for raw TCP connections to private destinations, in addition to HTTP traffic via fetch().

Origin CA certificate support for Workers VPC

More from Workers VPC

Origin CA certificate support for Workers VPC

More from Workers VPC