Cloudflare推出OHTTP网关产品扩展隐私保护基础设施

Cloudflare宣布推出OHTTP网关产品，作为其隐私保护基础设施套件的扩展1。该网关使应用后端能够接收HTTP请求而无需获知用户IP地址，通过关键字分离了中继和网关的信任模型1。

客户可以作为付费附加服务启用此功能1。启用该功能的客户需要实现OHTTP客户端并提供自己的中继1。网关将在Cloudflare全球边缘网络的每台服务器上运行以最小化延迟1。

OHTTP使用混合公钥加密（HPKE）在客户端和应用服务器之间对数据进行封装1。为保护隐私模型，Cloudflare将拒绝解密来自Cloudflare Workers或代理主机的请求1。

目前该功能正开放测试版及候选名单注册，Cloudflare计划在2024年秋季推出OHTTP网关关闭测试版1。

Cloudflare has announced the introduction of an OHTTP gateway, expanding its privacy protection infrastructure offerings. 1 The gateway enables application backends to receive HTTP requests without accessing the user's IP address, implementing a separated trust model between relay and gateway components through key isolation. 1

The service will be available as a paid add-on feature that customers can enable at the zone level. 1 Cloudflare plans to close the beta testing phase in autumn 2024, with signup for the candidate list currently open. 1 To utilize the gateway, customers must implement an OHTTP client and provide their own relay infrastructure. 1

The OHTTP gateway will operate on every server across Cloudflare's global edge network to minimize latency. 1 The system uses hybrid public key encryption (HPKE) to encapsulate data between the client and application server. 1 Cloudflare has committed to rejecting decryption attempts on requests originating from Cloudflare Workers or proxy hosts to maintain the integrity of the privacy model. 1