If you want Firebase Hosting rewrites and CDN, use Cloudflare in front for caching and passive failover, but true multi-region Cloud Run failover isn’t fully possible. If multi-region failover is top priority and you can skip Firebase Hosting, use Google Cloud Load Balancer directly to route traffic to Cloud Run. Use Full (strict) SSL with Cloudflare.