That was not scheduled maintainance, that was theit WaF and Workers dying. https://www.cloudflarestatus.com/incidents/lfrm31y6sw9q https://www.cloudflarestatus.com/incidents/k9ppxftx8bs5

I found it in the settings:

Under “Features”:

Do you have any tool to help with that? Ive set this up in the past, but it was pretty hands-on namespacing to get it to work rootless.

Edit: For completeness, here is a script similar to what I use.

It does (not sure how well), but it seems to be a paid feature. Found under Settings -> Split tunneling.