Cloudflare rolls out Mesh to secure agent and app traffic

Cloudflare has introduced Mesh, a developer-friendly private networking solution that connects users, nodes, and agents across Cloudflare One and external clouds, enabling secure access to private resources without exposing them publicly. The Mesh platform runs a single lightweight connector on your network and relies on private IP routing through Cloudflare’s global edge, with Gateways, DNS filtering, and device posture checks applying automatically to Mesh traffic.

It includes a free tier of 50 Mesh nodes and 50 users, and is designed to integrate with Workers, Durable Objects, and the Agents SDK to enable agentic workloads to reach private infrastructure directly. The approach aims to address NAT traversal by routing all Mesh traffic through Cloudflare’s network, offering bidirectional connectivity and visibility for agent traffic alongside human traffic.

According to The Cloudflare Blog, Mesh is available today as the foundation for unified private networking, with future work planned on hostname routing, Mesh DNS, and identity-aware routing to distinguish between human and agent identities.