Cloudflare Docs
Aegis
Cloudflare Docs
Aegis
Edit this page
Report an issue with this page
Log into the Cloudflare dashboard
Set theme to dark (⇧+D)
  1. Products
  2. Aegis

Cloudflare Aegis

Leverage dedicated IPs to improve your origin security and implement Zero Trust.
Enterprise-only

Cloudflare Aegis provides dedicated egress IPs (from Cloudflare to your origin) for your layer 7 WAF and CDN services. The egress IPs are reserved exclusively for your account so that you can increase your origin security by only allowing traffic from a small list of IP addresses.

Cloudflare Access

Cloudflare Access determines who can reach your application by applying the Access policies you configure.

Cloudflare Tunnel

Cloudflare Tunnel provides you with a secure way to connect your resources to Cloudflare without a publicly routable IP address.

Authenticated Origin Pulls

Authenticated Origin Pulls gives you the ability to perform mutual TLS between Cloudflare and your origin environment, providing cryptographically verifiable proof of the source of the traffic you receive.

​​ More resources

Introductory blog post
Deep dive into use cases where Aegis can help secure enterprise origins.
Multi-Vendor Architecture
Reference Architecture for multi-vendor application security and performance.