---
id: "cloudflare-workers-vpc"
type: "component"
kind: "private-link"
provider: "cloudflare"
category: "edge"
docs: "https://developers.cloudflare.com/workers-vpc/"
url: "https://localhost:3000/catalogue/components/cloudflare-workers-vpc"
---

# Workers VPC

Binding that lets a Worker reach private services over a Tunnel, Mesh or WAN on-ramp.

| | |
|---|---|
| Provider | [cloudflare](https://localhost:3000/catalogue?provider=cloudflare) |
| Kind | [Private endpoint](https://localhost:3000/catalogue/kinds/private-link) |
| Category | Edge |
| Official docs | [https://developers.cloudflare.com/workers-vpc/](https://developers.cloudflare.com/workers-vpc/) |

## Properties

| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| `approvalRequired` | boolean | — | no | — | inherited |
| `bindingType` | enum | `vpc-service`, `vpc-network` | no | — | inherited |
| `crossRegion` | boolean | — | no | false | inherited |
| `endpointCount` | integer | — | no | — | inherited |
| `managed` | boolean | — | no | false | **true** |
| `onRamp` | enum | `tunnel`, `mesh`, `wan` | no | "tunnel" | inherited |
| `privateDnsIntegration` | boolean | — | no | — | inherited |
| `protocol` | enum | `http`, `tcp` | no | "http" | inherited |
| `publicAccessDisabled` | boolean | — | no | — | **true** |

Bold values are the ones this component pins.

## Rules that apply · 0

No rule selects this kind or its category.

## Other products of the same kind · 13

- [PrivateLink](https://localhost:3000/catalogue/components/alibaba-privatelink.md) `alibaba-privatelink` — alibabacloud
- [PrivateLink endpoint service](https://localhost:3000/catalogue/components/aws-privatelink-service.md) `aws-privatelink-service` — aws
- [AWS RTB Fabric gateway](https://localhost:3000/catalogue/components/aws-rtb-fabric.md) `aws-rtb-fabric` — aws
- [AWS PrivateLink VPC endpoint](https://localhost:3000/catalogue/components/aws-vpc-endpoint.md) `aws-vpc-endpoint` — aws
- [Azure Private Link](https://localhost:3000/catalogue/components/azure-private-link.md) `azure-private-link` — azure
- [Cloudflare Tunnel](https://localhost:3000/catalogue/components/cloudflare-tunnel.md) `cloudflare-tunnel` — cloudflare
- [Generic private endpoint](https://localhost:3000/catalogue/components/private-link.md) `private-link` — default
- [Private Service Connect](https://localhost:3000/catalogue/components/google-private-service-connect.md) `google-private-service-connect` — gcp
- [Serverless VPC Access connector](https://localhost:3000/catalogue/components/google-serverless-vpc-access-connector.md) `google-serverless-vpc-access-connector` — gcp
- [Virtual Private Endpoint Gateway](https://localhost:3000/catalogue/components/ibm-virtual-endpoint-gateway.md) `ibm-virtual-endpoint-gateway` — ibm
- [Private Endpoint](https://localhost:3000/catalogue/components/oci-private-endpoint.md) `oci-private-endpoint` — oci
- [Service Gateway](https://localhost:3000/catalogue/components/oci-service-gateway.md) `oci-service-gateway` — oci
- [OUTSCALE Net access point](https://localhost:3000/catalogue/components/outscale-net-access-point.md) `outscale-net-access-point` — outscale

## Use it in a design

```yaml
nodes:
  - { id: "cloudflare-workers-vpc", component: "cloudflare-workers-vpc" }
```

## Source (`component` YAML, verbatim)

```yaml
# yaml-language-server: $schema=../../schema/component.schema.json
# Workers VPC: a binding that lets a Worker reach private services that are not exposed to the public
# internet. Per "Workers VPC" a VPC Service binds one host and port over a Cloudflare Tunnel, while a
# VPC Network binds a whole Tunnel, Mesh or WAN on-ramp; both carry HTTP and raw TCP. Currently beta.
schemaVersion: "1"
type: "component"
id: "cloudflare-workers-vpc"
kind: "private-link"
provider: "cloudflare"
docs: "https://developers.cloudflare.com/workers-vpc/"
defaults:
  managed: true
  publicAccessDisabled: true
properties:
  bindingType:
    type: "enum"
    values: ["vpc-service", "vpc-network"]
  onRamp:
    type: "enum"
    values: ["tunnel", "mesh", "wan"]
    default: "tunnel"
  protocol:
    type: "enum"
    values: ["http", "tcp"]
    default: "http"
```

Human page: https://localhost:3000/catalogue/components/cloudflare-workers-vpc