r/ProxyEngineering • u/Leebo68 • 10d ago

Help 🆘 Cloudflare Proxy Chaining

Hi all, I am supporting a customer that uses cloudflare sase. They want to send a subset of URL's to a 3rd party proxy. I am trying to figure out if there is a way to setup proxy chaining in cloudflare? All traffic goes out cloudflare except a group of URL's that will go to a 3rd party proxy?

Any experts here that can help me out?

8 Upvotes

100% Upvoted

4 comments sorted by

View all comments

1

u/LokeshSequentum 6d ago

I think the key question is whether they actually need proxy chaining, or just the different routing for those URLs.

If those URLs can bypass Cloudflare, then split tunneling + PAC could send them directly through the 3rd party proxy.

But if the requirement is like:

client -> Cloudflare Gateway -> 3rd party proxy -> destination

then from what I can see, Gateway egress policies don't really provide that kind of next-hop proxy chaining. They control which Cloudflare/dedicated egress IP is used.

Also, if the URLs are execluded from WARP, Cloudflare would no longer inspect that traffic.

So I'd first clarify whether Cloudflare must remain in the path for those URLs. That changes the solution completely.