Someone correct me if I'm wrong, but the IP's of outgoing requests from Workers ought to match Cloud
Someone correct me if I'm wrong, but the IP's of outgoing requests from Workers ought to match Cloudflare's ips's https://cloudflare.com/ips but just because a request is coming from that IP doesn't mean it's legitimate traffic. There's some good info here https://news.ycombinator.com/item?id=26690388
This page is intended to be the definitive source of Cloudflare’s current IP ranges.

kentonv
Hi, I'm the tech lead of Cloudflare Workers.This article contains several misunderstandings.If a Cloudflare customer has configured their origin server to respond only to Cloudflare IPs, then they MUST also verify that the "Host" header on any request actually matches their domain name. If they do not verify the Host header, then anyone can sign...

Hacker News
•4/4/21, 3:47 PM


