Phaethon relay

This endpoint lets a Phaethon daemon on a filtered network reach origins that the network breaks — currently *.vercel.com, whose TLS is intercepted on the affected path. The Cloudflare edge performs the fetch and returns the response.

It is not an open proxy and not a TCP tunnel. Every request must carry a shared secret, and only hosts in this deployment's allowlist can be fetched. The allowlist is enforced here, server-side.

EndpointPurpose
/healthliveness, colo, and this relay's allowlist
/relay/<host>/<path>fetch an allowlisted origin (requires X-Phaethon-Token)