Bypassing Cloudflare for True Origin Health Checks with Blackbox Exporter and CoreDNS

You have 100+ web endpoints behind Cloudflare. You need to know if the origin is healthy. Not the edge. Not the CDN cache. The actual server behind it. Prometheus Blackbox Exporter is the standard answer for HTTP probing. Point it at a URL, it makes a request, you get probe_success , probe_duration_seconds , probe_http_status_code . Clean, simple, works. Until you put Cloudflare in front of everything. The problem When Blackbox probes https://app.example.com , DNS resolves to Cloudflare's edge.