From Cloudflare Blog

Cloudflare services for private origins is now generally available

Public traffic to private origins, with WAF, bot management, caching, and Workers, is now available to every customer with Cloudflare One connectivity.

Read the full report at Cloudflare Blog ↗