It's prior to caddy, it's the request that goes to cloudflare. The only fix is for netmaker to include the required content type header in grpc requests