Does a Cloudflare Access Bypass rule expose my origin to everyone, or only matching traffic?
I'm setting up Cloudflare Zero Trust in front of an internal admin tool served through a cloudflared tunnel, and I want most paths to require SSO login while a health‑check endpoint stays reachable without authentication. The Access policy types include Allow, Require, Block, and Bypass, and the documentation describes Bypass as letting matching traffic skip
cloudflare