(Cloudflare team here) cloudflared proxies the traffic through the Cloudflare network to the service behind Access so that Cloudflare can ensure the request is authenticated first and then issue a token to the client through cloudflared.
19 karma · joined September 27, 2018
We're taking what we learned in that Secure Registrar product and launching a self-serve registrar. Only charges what the registries charge us, no markup. We announced it today. https://blog.cloudflare.com/cloudflare-registrar/