Securely connect your private cloud to Cloudflare to build cross-cloud apps.
Workers VPC allows you to connect your Workers to your private APIs, services, and databases in external clouds (AWS, Azure, GCP, on-premise, and others) that are not accessible from the public Internet.
VPC Services let you bind to a specific host and port in your private network. Connect a Cloudflare Tunnel to your infrastructure, register each target as a VPC Service, and use the binding API from your Worker. VPC Services support HTTP and TCP (TCP databases through Hyperdrive).
VPC Networks give Workers broader access — bind to an entire Cloudflare Tunnel, Cloudflare Mesh network, or Cloudflare WAN on-ramp (GRE, IPsec, CNI) without pre-registering individual hosts. The URL or address you pass at runtime determines the destination. VPC Networks support HTTP via fetch() and raw TCP via connect() for non-HTTP services like Redis, MQTT, and custom protocols. The same binding can also egress to public Internet destinations through Cloudflare Gateway, with your Zero Trust policies and logs applied.
Bind via vpc_servicesorvpc_networks