This page is a prelaunch specification draft. Exact admin labels and click paths will be updated against the release build.
What this covers
Cloudflare-aware IP resolution and manually trusted proxy CIDRs prevent a reverse proxy from collapsing every customer into one apparent address.
Operational principles
- Prefer a recoverable challenge when risk is uncertain.
- Review reason codes before changing protection policy.
- Preserve attack evidence and avoid destructive emergency actions.
- Confirm behavior in a monitored environment before launch.
Related resources
How the decision flow works · Compatibility matrix · Support