Hmm, the worker should not be requesting anything from /sub. Just wondering, is this a user (browser) initiated request that is getting proxied through CF, or is the worker directly trying to reach the /sub endpoint? Any additional details you can share, including sample URL where this is implemented, would be helpful. Feel free to DM me if you prefer