Cloudflare Gateway can send allowed traffic through custom Workers

Cloudflare Gateway’s new Forward action sends allowed HTTP traffic through a Worker, letting teams modify requests and responses or trigger custom actions without running a separate proxy. Gateway handles connections and TLS while the Worker supplies application logic. Forward is in public beta; the separate Custom Functions feature for returning values during policy evaluation is planned for later this year.

Cloudflare · Oct 15, 2026

Why it matters

Inline transformation offers a programmable extension where fixed allow-or-block rules are insufficient.

More context

Try a narrowly scoped Forward rule on test traffic. The first matching Forward rule handles traffic already allowed by HTTP policies; do not confuse that with the forthcoming policy-selector feature.

Keep in mind

Forward is beta, and the announcement distinguishes it from functionality not yet available.

Original read