Workers VPC

cloudflarePrivate endpointcloudflare-workers-vpc

Binding that lets a Worker reach private services over a Tunnel, Mesh or WAN on-ramp.

Provider
cloudflare
Category
Edge
Properties · 2 set by this component
propertytypevaluesrequiredkind defaultthis component
approvalRequiredboolean—no—inherited
bindingType · component propertyenumvpc-service | vpc-networkno—inherited
crossRegionboolean—nofalseinherited
endpointCountinteger—no—inherited
managedboolean—nofalse▸ true
onRamp · component propertyenumtunnel | mesh | wannotunnelinherited
privateDnsIntegrationboolean—no—inherited
protocol · component propertyenumhttp | tcpnohttpinherited
publicAccessDisabledboolean—no—▸ true
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "workers-vpc", component: "cloudflare-workers-vpc" }
Other Private endpoint products · 13
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Workers VPC: a binding that lets a Worker reach private services that are not exposed to the public
# internet. Per "Workers VPC" a VPC Service binds one host and port over a Cloudflare Tunnel, while a
# VPC Network binds a whole Tunnel, Mesh or WAN on-ramp; both carry HTTP and raw TCP. Currently beta.
schemaVersion: "1"
type: "component"
id: "cloudflare-workers-vpc"
kind: "private-link"
provider: "cloudflare"
docs: "https://developers.cloudflare.com/workers-vpc/"
defaults:
  managed: true
  publicAccessDisabled: true
properties:
  bindingType:
    type: "enum"
    values: ["vpc-service", "vpc-network"]
  onRamp:
    type: "enum"
    values: ["tunnel", "mesh", "wan"]
    default: "tunnel"
  protocol:
    type: "enum"
    values: ["http", "tcp"]
    default: "http"

The same page as markdown, for an agent: /catalogue/components/cloudflare-workers-vpc.md