Clearnet as origin

Use a public-internet HTTP/HTTPS server as your origin.

Status: skeleton

Full content lands in a follow-up pass.

Steps

1. In the portal: Sites → New site → Origin: Clearnet → enter hostname or IP + port
2. Pick origin auth (one of):
   • None — public origin
   • Bearer — we send Authorization: Bearer <secret> on every fetch
   • Egress-IP allowlist — restrict at your firewall to our published egress IPs
   • mTLS — Business tier
3. Save. First request fills cache.

Hardening checklist

• Lock origin access at the network layer to our egress IPs (we publish a stable list; we email you 30 days before any addition)
• Consider end-to-end encryption at the application layer if response bodies contain anything you don't want a TLS-terminating intermediary to see — see security best practices