# Functions
Listen only accepts TCP connections from Cloudflare IP ranges.
MatchServerNameHost checks if SNI matches the Host header for a TLS http.Request.
NewListener returns a listener that only accepts TCP connections from Cloudflare IP ranges.
NewServer creates a Cloudflare origin http.Server.
NewServerWithCerts creates a Cloudflare origin http.Server from loaded certificates.