Use the rewritten origin path when purging a Cloudflare cache prefix

A visitor-facing path can differ from the prefix that identifies stored resources after a transform.

Resilient network core with engineered blue and gold data paths.
DSE visual intelligenceNetworks & infrastructureGuide · 2 min read
Executive summary

What you need to know

A visitor-facing path can differ from the prefix that identifies stored resources after a transform.

Potentially affected

This concerns Cloudflare prefix invalidation.

DSE recommendation

DSE recommends recording the visitor path and rewritten origin path together in the deployment record.

A visitor-facing path can differ from the prefix that identifies stored resources after a transform.

Source facts

Cloudflare warns that prefix purges must use the post-transformed origin URL when a Transform Rule changes the path. Prefix input does not accept query strings or fragments, and a directory purge covers resources within that prefix regardless of their query strings. Tiered-cache follow-up responses may show EXPIRED rather than only MISS.

Source: Cloudflare — ​Purge cache by prefix (URL).

Applicability

This concerns Cloudflare prefix invalidation.

DSE recommendation

DSE recommends recording the visitor path and rewritten origin path together in the deployment record. Choose the narrowest directory boundary that covers the changed release and review neighboring content before purging it. Keep query-specific resources in mind when estimating the origin refill load. Use observed content revisions to judge the result rather than treating one particular cache-status string as the only valid outcome. Make the transformed prefix a reviewed release parameter rather than an operator’s guess during deployment. Include two query variants under that prefix and a neighboring directory in the test set. Use visible revision markers to confirm the intended boundary without depending on a single status code.

Verification

In a controlled release test, update assets under the chosen origin prefix and retain an unchanged asset outside it. Purge using the documented post-transform value, then request both sets through their public paths. Confirm updated content and the unaffected control, and inspect origin traffic for the expected refill without assuming local browser cache was cleared.

Official reference

Cloudflare — ​Purge cache by prefix (URL). Reviewed October 20, 2026.

Primary reference

Review the official source

Cloudflare — ​Purge cache by prefix (URL) · Verified October 20, 2026

Open official reference ↗
Plan the next step

Need help applying this guidance safely?

DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.

Talk with DSE