Does this hold true even for subrequests to your own zone, where you say here that they go directly to the origin server?