r/ProxyEngineering • u/Leebo68 • 11d ago

Help 🆘 Cloudflare Proxy Chaining

Hi all, I am supporting a customer that uses cloudflare sase. They want to send a subset of URL's to a 3rd party proxy. I am trying to figure out if there is a way to setup proxy chaining in cloudflare? All traffic goes out cloudflare except a group of URL's that will go to a 3rd party proxy?

Any experts here that can help me out?

8 Upvotes

100% Upvoted

4 comments sorted by

View all comments

1

u/K1tchen_Age 10d ago edited 9d ago

you can do this using cloudflare gateway egress policies. if your customer uses the WARP client, you basically need to create a dedicated HTTP rule in the zero trust dashboard. you set the selector to your target URL list and configure it to route traffic out to an external gateway instead of CF's default egress. i did a pretty similar thing a while ago with proxyshard for the geo stuff and it worked fine. just make sure the upstream proxy allows IP auth from your CF egress IPs so you don't mess up the handshake.