Validate the edge and origin before activation
Confirm certificate, origin health, Host and SNI behavior, private access and rollback before routing users.
Expected result
AegiFlow can reach the intended origin through a tested and reversible route.
Request path
The fast path is Cloudflare → Envoy → Coraza → origin. The control database and threat feeds are not called during the request.
Preflight
Validate the correct Host and TLS SNI, representative routes, redirects, cookies, uploads and the health endpoint. Record the original DNS object before any cutover.
Start in observation mode. Restrict direct origin access only after the routed path has remained stable.
Verification
- Origin returns the expected hostname
- Health checks pass
- Direct bypass state is known