Document private application matching precedence

[kennyj42]

Summary

• Document how Access selects among overlapping destinations in self-hosted private applications.
• Cover hostname, IP/CIDR, port, virtual network, and protocol precedence.
• Clarify that the matching order does not apply to legacy private network applications.

Validation

• pnpm run check

[github-actions]

Preview URL: https://2a478e67.preview.developers.cloudflare.com
Preview Branch URL: https://kjohnson-document-private-app-precedence.preview.developers.cloudflare.com

Files with changes (up to 15)

Original Link	Updated Link
https://developers.cloudflare.com/cloudflare-one/access-controls/applications/non-http/self-hosted-private-app/	https://kjohnson-document-private-app-precedence.preview.developers.cloudflare.com/cloudflare-one/access-controls/applications/non-http/self-hosted-private-app/

[cloudflare-workers-and-pages]

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://kjohnson-document-private-app-precedence.previews.developers.cloudflare.com (commit 2a478e6)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status	Deployment URL	Commit	Updated (UTC)	See this deployment's details
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://cb1ed41b.previews.developers.cloudflare.com	2a478e6	2026-09-21T16:47:13.023Z	Visit the dashboard ↗

[cloudflare-docs-bot]

Review

✅ No issues found in commit 2a478e6.

Code Review

This code review is in beta and may not always be helpful — use your judgment.

_{No code review issues found.}

Conventions

_{No convention issues found.}

Style Guide Review

_{No style-guide issues found.}

Commands

Only codeowners can run commands. Post a comment with the command to trigger it.

Command	Description
/review	Runs a review now. Incremental if a prior review exists, full if not.
/full-review	Re-reviews the entire PR diff from scratch, ignoring incremental history. Useful after a rebase, when you want a fresh review, or if the bot gets out of sync and reports issues that no longer exist.
/ignore-review-limit	Permanently lifts the 2-review automatic limit for this PR. Future pushes will trigger reviews as normal.
/disable-auto-review	Stops automatic reviews from triggering on future pushes to this PR. Codeowners can still run /review or /full-review manually.
/rebase	Rebases the PR branch against production. On conflict, attempts to resolve automatically using AI. Stops with an explanation if confidence is not high enough.

[cloudflare-docs-bot]

Review coverage

🟡 1 ownership area needs approval.

Suggested reviewers: @nikitacano

Needs approval	Eligible approvers	Suggested
cloudflare-one	@asamborski, @kennyj42, @cloudflare/cf1-reviewers, @cloudflare/product-owners	nikitacano

CODEOWNERS mappings for displayed areas (1)

Pattern	Owners
/src/content/docs/cloudflare-one/access-controls/	@asamborski, @kennyj42, @cloudflare/cf1-reviewers, @cloudflare/product-owners