---
description: Workers subrequests to Cloudflare-proxied BYOIP destinations now preserve request and Bot Management context and follow standard cross-zone client IP handling.
title: Workers subrequests now preserve context for BYOIP destinations
image: https://developers.cloudflare.com/changelog/post/2026-10-30-byoip-workers-subrequest-context/og.png?v=d4e2bda8237c95db
---

[Skip to content](#main-content)

[View RSS feeds](https://developers.cloudflare.com/fundamentals/new-features/available-rss-feeds/) [ Subscribe to RSS](https://developers.cloudflare.com/changelog/rss/index.xml)

[Back to all posts](https://developers.cloudflare.com/changelog)

October 30, 2026

## Workers subrequests now preserve context for BYOIP destinations

[Workers](https://developers.cloudflare.com/workers/) [BYOIP](https://developers.cloudflare.com/byoip/) [Bots](https://developers.cloudflare.com/bots/)

Copy as Markdown| [View as Markdown](https://developers.cloudflare.com/changelog/post/2026-10-30-byoip-workers-subrequest-context/index.md)| [Agent setup](https://developers.cloudflare.com/agent-setup/)

Cloudflare now preserves Workers context when a subrequest targets a Cloudflare-proxied hostname using [Bring Your Own IP (BYOIP)](https://developers.cloudflare.com/byoip/). These requests are identified as Cloudflare-to-Cloudflare traffic instead of external Internet traffic.

Previously, some BYOIP subrequests could lose Workers context and original client signals. This could cause security rules to behave unexpectedly, Bot Management to evaluate an internal Cloudflare connection instead of the original client, or affected requests to return false `403` responses.

Workers subrequests to BYOIP destinations now preserve the [`CF-Worker`](https://developers.cloudflare.com/fundamentals/reference/http-headers/#cf-worker) header and [`cf.worker.upstream_zone`](https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.worker.upstream_zone/) field. This supports consistent security rule evaluation across same-zone and cross-zone subrequests.

[Bot Management fields](https://developers.cloudflare.com/bots/reference/bot-management-variables/#o2o-and-subrequests) on the destination zone now represent the original end-user connection for affected BYOIP subrequests. Bot scores, verified bot status, and JA3/JA4 fingerprints no longer represent the internal connection between Cloudflare services.

Because Cloudflare-proxied BYOIP destinations now follow standard Workers subrequest handling, cross-zone requests set [`CF-Connecting-IP`](https://developers.cloudflare.com/fundamentals/reference/http-headers/#cf-connecting-ip-in-worker-subrequests) to the Workers client IP address `2a06:98c0:3600::103` for security reasons. This applies when a Worker in one Cloudflare zone sends a subrequest to a hostname in another Cloudflare zone. Same-zone subrequests continue to reflect the client IP through `CF-Connecting-IP`.

For more information, refer to [Cloudflare BYOIP](https://developers.cloudflare.com/byoip/), [Workers subrequests](https://developers.cloudflare.com/workers/platform/limits/#subrequests), and [`CF-Connecting-IP` in Worker subrequests](https://developers.cloudflare.com/fundamentals/reference/http-headers/#cf-connecting-ip-in-worker-subrequests).

```json
{"@context":"https://schema.org","@type":"BlogPosting","@id":"https://developers.cloudflare.com/changelog/post/2026-10-30-byoip-workers-subrequest-context/#page","headline":"Workers subrequests now preserve context for BYOIP destinations","description":"Workers subrequests to Cloudflare-proxied BYOIP destinations now preserve request and Bot Management context and follow standard cross-zone client IP handling.","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-byoip-workers-subrequest-context/","inLanguage":"en","image":"https://developers.cloudflare.com/changelog/post/2026-10-30-byoip-workers-subrequest-context/og.png?v=d4e2bda8237c95db","dateModified":"2026-10-30","datePublished":"2026-10-30","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}}
```