Workers VPC now supports Cloudflare Origin CA certificates when connecting to your private services over HTTPS. Previously, Workers VPC only trusted certificates issued by publicly trusted certificate authorities (for example, Let's Encrypt, DigiCert). With this change, you can use free Cloudflare Origin CA certific...
Workers VPC - Origin CA certificate support for Workers VPC
Cloudflare Developer Platform Changelog · 2026-02-13
Related items
Hyperdrive - Hyperdrive support for private databases with Workers VPC
You can now connect Hyperdrive to a private database through a Workers VPC service . This is the recommended way to connect Hyperdrive to a private database that is not exposed to the public Internet. When creating a Hyperdrive configuration in the Cloudflare dashboard, choose Connect to private database and then Wo...
Workers - New RFC 9440 mTLS certificate fields in Workers
Four new fields are now available on request.cf.tlsClientAuth in Workers for requests that include a mutual TLS (mTLS) client certificate. These fields encode the client certificate and its intermediate chain in RFC 9440 format — the same standard format used by the Client-Cert and Client-Cert-Chain HTTP headers — s...
Workers - Better Windows support for Python Workers
Pywrangler , the CLI tool for managing Python Workers and packages, now supports Windows, allowing you to develop and deploy Python Workers from Windows environments. Previously, Pywrangler was only available on macOS and Linux. You can install and use Pywrangler on Windows the same way you would on other platforms....
Workers - Support for ctx.exports in @cloudflare/vitest-pool-workers
The @cloudflare/vitest-pool-workers package now supports the ctx.exports API , allowing you to access your Worker's top-level exports during tests. You can access ctx.exports in unit tests by calling createExecutionContext() : import { createExecutionContext } from "cloudflare:test" ; import { it , expect } from "vi...
Workers VPC - Observability for Workers VPC Services
Each VPC Service now has a Metrics tab so you can monitor connection health and debug failures without leaving the dashboard. Connections — See successful and failed connections over time, broken down by what is responsible: your origin (Bad Upstream), your configuration (Client), or Cloudflare (Internal). Latency —...
Workers - Support for Node.js DNS, Net, and Timer APIs in Workers
When using a Worker with the nodejscompat compatibility flag enabled, you can now use the following Node.js APIs: node:net node:dns node:timers node:net You can use node:net to create a direct connection to servers via a TCP sockets with net.Socket . JavaScript import net from "node:net" ; const exampleIP = "127.0.0...