{"_self":{"principle":"Self-explaining payload — no external context required. This _self block describes what you are reading and where to look next.","widget":"article_topology","feature":"topology","name":"Article topology","what":"Claims, sources, anecdotes, user reports, related embeds, question graph slice — for ask/ROUTER.","contains":"claims, sources, anecdotes, question_graph slice","slug":"cloudflare-os","urls":{"read":"https://miscsubjects.com/api/articles/cloudflare-os/topology"},"how_to_use":"Claims, sources, anecdotes, user reports, related embeds, question graph slice — for ask/ROUTER.","write":null,"imessage":null,"router_tag":null,"proof_chain":[{"step":1,"claim":"Articles are voxel graphs of tiered claims, not prose blobs.","verify":"https://miscsubjects.com/api/articles/constitution"},{"step":2,"claim":"Claims link to hash-chained sources via source_ids.","verify":"https://miscsubjects.com/api/articles/cloudflare-os/sources"},{"step":3,"claim":"Ask reads topology; ingest/claim append to ledger.","verify":"https://miscsubjects.com/api/protocol"},{"step":4,"claim":"Models queue growth: populate → collaborate → repair → reflex.","verify":"https://miscsubjects.com/api/protocol/grow"},{"step":5,"claim":"Graph proves its own shape (reflex) and $/claim (yield).","verify":"https://miscsubjects.com/graph.html?layer=reflex"},{"step":6,"claim":"Full feature index + _explain on every API response.","verify":"https://miscsubjects.com/api/articles/system-map"}],"related_features":[{"id":"ask","name":"Ask protocol","what":"Answer only from topology; creates question_node with gaps and ingest_hint.","urls":{"read":"https://miscsubjects.com/api/articles/cloudflare-os/prompts","write":"https://miscsubjects.com/api/protocol/ask"}},{"id":"graph_topology","name":"Cross-article graph","what":"Merged claims/sources across condition+stack slugs for one question.","urls":{"read":"https://miscsubjects.com/api/articles/cloudflare-os/graph-topology?question=..."}},{"id":"question_graph","name":"Question graph","what":"Ask nodes (questions + gaps) and evidence_ingest nodes (pasted model output).","urls":{"read":"https://miscsubjects.com/api/articles/cloudflare-os/question-graph","write":"https://miscsubjects.com/api/protocol/ask"}},{"id":"voxels","name":"Voxel graph","what":"Claims as atoms, sources as edges (supported_by, posted_by). Per-claim provenance.","urls":{"read":"https://miscsubjects.com/api/articles/cloudflare-os/voxels","write":"https://miscsubjects.com/api/protocol/claim"}}],"system_map":"https://miscsubjects.com/api/articles/system-map","system_map_markdown":"https://miscsubjects.com/api/articles/system-map?format=markdown","not_medical_advice":true},"_explain":{"feature":"topology","name":"Article topology","what":"Claims, sources, anecdotes, user reports, related embeds, question graph slice — for ask/ROUTER.","why":"Every feature is auditable collective intelligence","how":"Claims, sources, anecdotes, user reports, related embeds, question graph slice — for ask/ROUTER.","model":null,"verifies":null,"urls":{"read":"https://miscsubjects.com/api/articles/cloudflare-os/topology"},"imessage":null,"router":null,"related":[{"id":"ask","what":"Answer only from topology; creates question_node with gaps and ingest_hint."},{"id":"graph_topology","what":"Merged claims/sources across condition+stack slugs for one question."},{"id":"question_graph","what":"Ask nodes (questions + gaps) and evidence_ingest nodes (pasted model output)."},{"id":"voxels","what":"Claims as atoms, sources as edges (supported_by, posted_by). Per-claim provenance."}],"not_medical_advice":true},"slug":"cloudflare-os","title":"The Cloudflare OS: one account running an entire build","register":"essay","tags":["cloudflare","architecture","cloudflare-os"],"updated_at":"2026-07-26T05:47:25.696Z","body_excerpt":"One Cloudflare account runs this application end to end: the pages, the API, the relational database, the append-only event store, the object store, the queue, the scheduled jobs, the headless browser, the model calls and outbound mail. No second host, no virtual machine, no container.\n\nA **binding** is a line in a Cloudflare configuration file that attaches a resource to code and names the property the code reaches it by. `env.DB` is a binding. The resource behind it has an account-scoped identifier; the running code never sees that identifier, only the name. That indirection is why a preview deployment can point at a different database without one line of code changing.\n\nBelow: the complete binding list read out of the configuration files, the unit each one bills on, the arithmetic for a stated month, the failure that turns a hobby account into a five-figure invoice, and reports from people who ran this stack and stayed or left.\n\n## Evidence status\n\n**Observed** marks first-party measurements or runtime receipts from the named environment.\n**Derived** marks arithmetic calculated from cited inputs. **Specified** marks vendor or standards\ndocumentation. **Implemented** and **deployed** name code and live-state evidence, respectively.\n**Reproduced** means the stated procedure was rerun. **Externally attested** marks operator reports;\nthose reports show that an experience occurred, not that it is universal.\n\n## Nine bindings ship with the request layer\n\n`wrangler.toml` at the repository root declares everything the page-and-API layer can touch. The account identifier and the workers.dev subdomain are redacted; nothing else is.\n\n| Binding | Kind | What is behind it | Why this and not something else |\n| --- | --- | --- | --- |\n| `DB` | D1 database `loop-content-spine` | 91 tables: articles, the capability directory, agents, leads, tasks, sessions | Relational reads with joins and indexes. KV cannot filter; R2 cannot query |\n| `LEDGER` | D1 database `loop-shared-events` | 12 tables, append-only: `events`, `invocations`, `capabilities`, hash-chain checkpoints | Separate database so a write-heavy audit trail cannot compete with page reads for the same storage limit |\n| `KV` | Workers KV namespace `loop_content_kv` | 19 keys: OAuth handles, prompt settings, one cached audio blob | Config distributed to every location. Read-mostly, tolerant of eventual consistency |\n| `R2` | R2 bucket `miscsubjects-ledger` | 645 objects, 12.3 MB: vendored docs, disclosure receipts, agent-turn archives | Bytes with no query on them. R2 charges nothing for egress; a database charges per row scanned |\n| `AI` | Workers AI | Model inference invoked from a request | Inference without an outbound API key in the request path |\n| `DIRECTORY_DO` | Durable Object class `DirectoryDO` in Worker `loop-safe-directory-do` | Slug registry plus an append-only mutation-intent log | Single strongly-consistent writer. D1 cannot hold a transaction across two requests, so the serialization point has to be an object |\n| `TASKS` | Queue producer for `loop-tasks` | Work handed off so the reader is not kept waiting | A request has a wall-clock budget; a queue consumer has its own |\n| `STORE` | Service binding to Worker `loop-safe-storage` | Bulk blobs in a second R2 bucket plus a D1 index over them | Keeps a second bucket and a second database out of the Pages project's binding list. Worker-to-worker, no public route |\n| `META_BRIDGE` | Service binding to Worker `loop-meta-bridge` | The Meta Graph API, fronted | That Worker binds the Meta token by reference from Secrets Store. Nothing copies the token |\n\nAll nine are repeated under `[[env.preview.*]]` in the same file, with `DB` and `LEDGER` pointing at `loop-content-spine-preview` and `loop-shared-events-preview`. Pages environment overrides do not inherit: a binding declared once at the top level and not repeated under `env.preview` does not exist in a preview deployment at all. Two D1 identifiers differ; the other seven bindi","ranking":"safety-first (interaction_risk/limitations), then quote-gated effective_weight","claims":[{"id":"c1","text":"One Cloudflare account supplies the application's request layer, relational stores, event store, object storage, async work, browser, model calls and outbound mail.","tier":"system","section":"Nine bindings ship with the request layer","interaction_risk":false,"status":"active","source_ids":["s1","s2","s3","s4","s42"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c2","text":"The Pages request layer declares nine production bindings and repeats all nine in preview, with only the two D1 identifiers changed.","tier":"system","section":"Nine bindings ship with the request layer","interaction_risk":false,"status":"active","source_ids":["s2","s4","s42"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c3","text":"Seven sibling Workers hold scheduled execution, durable state, bulk storage, private service bridges, MCP, federation and the robots route.","tier":"system","section":"Seven more Workers hold what a request cannot","interaction_risk":false,"status":"active","source_ids":["s3","s4","s42"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c4","text":"The Functions code references 68 uppercase environment names, including 43 credentials, while values remain outside the repository.","tier":"system","section":"Secrets appear as names in code and as values nowhere in the repository","interaction_risk":false,"status":"active","source_ids":["s42","s5"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c5","text":"Workers Paid costs at least $5 per account and includes allowances for Workers, Pages Functions, KV and Durable Objects before usage charges begin.","tier":"system","section":"Every binding bills on a different unit","interaction_risk":false,"status":"active","source_ids":["s6"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c6","text":"D1 bills rows scanned and rows changed, KV bills per-key operations, R2 bills storage and operation classes, and queue delivery normally consumes three operations.","tier":"system","section":"Every binding bills on a different unit","interaction_risk":false,"status":"active","source_ids":["s11","s7","s8","s9"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c7","text":"Durable Object alarms count as requests and duration can accrue while an object remains resident, so a self-scheduling loop can bill without user traffic.","tier":"system","section":"Every binding bills on a different unit","interaction_risk":false,"status":"active","source_ids":["s10","s25"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c8","text":"Workflows, Browser Rendering and Email Routing use separate step, browser-hour and binding contracts from ordinary request handling.","tier":"system","section":"Every binding bills on a different unit","interaction_risk":false,"status":"active","source_ids":["s12","s13","s14"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c9","text":"The measured indexed lookup read one row in 0.1746 ms while the LIKE scan read 2,186 rows in 23.1205 ms.","tier":"system","section":"One index turns 2,186 rows read into 1","interaction_risk":false,"status":"active","source_ids":["s18","s43"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c10","text":"At one million monthly page views under the stated indexed-query assumptions, the measured application remains inside every included allowance and costs $5.","tier":"system","section":"The arithmetic for one month at one million page views","interaction_risk":false,"status":"active","source_ids":["s11","s12","s44","s6","s7","s8","s9"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c11","text":"A founder reported a $34,895 invoice after 60-plus preview Durable Objects repeatedly scheduled alarms, peaking near 930 billion row reads per day with zero users.","tier":"system","section":"$34,895 in eight days, with zero users and no alert","interaction_risk":false,"status":"active","source_ids":["s10","s25"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c12","text":"The correct binding depends on the job: SQL for relational queries, KV for read-mostly config, R2 for bytes, Durable Objects for serialized state, and queues or workflows for deferred work.","tier":"system","section":"Pick the binding by the job, not by the brand","interaction_risk":false,"status":"active","source_ids":["s1","s10","s11","s12","s3","s7","s8","s9"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c13","text":"Standard Workers do not offer country placement, while Durable Object state can be restricted to documented jurisdictions and Regional Services requires Enterprise.","tier":"system","section":"Six documented reasons to keep an application off this platform","interaction_risk":false,"status":"active","source_ids":["s15","s16","s26"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c14","text":"Two production operators report D1 latency of 400 ms or longer and multi-second internal-network hangs, while a small independent harness measured 16 ms in one zone.","tier":"system","section":"Six documented reasons to keep an application off this platform","interaction_risk":false,"status":"active","source_ids":["s19","s27","s28"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c15","text":"D1 cannot keep a transaction open across multiple requests, and its binding model makes one-database-per-tenant deployment cumbersome.","tier":"system","section":"Six documented reasons to keep an application off this platform","interaction_risk":false,"status":"active","source_ids":["s18","s29","s30"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c16","text":"Developers report leaving over Wrangler monorepo friction, and Pages users face a Workers migration that some external-domain setups cannot complete.","tier":"system","section":"Six documented reasons to keep an application off this platform","interaction_risk":false,"status":"active","source_ids":["s17","s31","s32","s33"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c17","text":"A self-described non-coder reports shipping a 60-route analytics platform with four D1 databases and the broader Cloudflare binding stack.","tier":"system","section":"Four people who stayed, at four different scales","interaction_risk":false,"status":"active","source_ids":["s34"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c18","text":"One operator reports moving an AWS RDS service to Workers and D1 in one week and saving at least $250 per year.","tier":"system","section":"Four people who stayed, at four different scales","interaction_risk":false,"status":"active","source_ids":["s35"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c19","text":"Operators report multi-million monthly active users on Durable Object SQLite and negligible tick-based game costs when alarms replace persistent connections.","tier":"system","section":"Four people who stayed, at four different scales","interaction_risk":false,"status":"active","source_ids":["s36","s37","s38"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c20","text":"Workers creator Kenton Varda argues for Durable Object storage over D1 for singleton data and against using KV as a database.","tier":"system","section":"The person who built Workers argues against the default choice","interaction_risk":false,"status":"active","source_ids":["s38","s39"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c21","text":"A production D1 user reports acceptable performance after enabling Smart Placement, so D1's convenience and its latency failures both have real evidence.","tier":"system","section":"The person who built Workers argues against the default choice","interaction_risk":false,"status":"active","source_ids":["s19","s40"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c22","text":"Filed issues reproduce Workflow step-size failures, Pages bundle limits, Queue remote-development 500s, Browser Rendering API errors and stale Durable Object alarms.","tier":"system","section":"Symptom, cause, fix","interaction_risk":false,"status":"active","source_ids":["s20","s21","s22","s23","s24"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c23","text":"A mail operator reports Outlook silently blocking forwarded mail from Cloudflare IP ranges, a failure distinct from the send_email binding itself.","tier":"system","section":"Symptom, cause, fix","interaction_risk":false,"status":"active","source_ids":["s14","s41"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false},{"id":"c24","text":"The published commands count 387 JavaScript files, 91 content tables, 12 ledger tables, three R2 buckets and six KV namespaces.","tier":"system","section":"How the counts on this page were taken","interaction_risk":false,"status":"active","source_ids":["s42","s43","s44"],"why_material":"This changes the platform choice, configuration, cost model, or failure response.","retracted_at":null,"retraction_reason":null,"challenged_by":[],"effective_weight":0.1,"quote_gated":false}],"sources":[{"id":"s1","type":"publisher_documentation","url":"https://developers.cloudflare.com/workers/runtime-apis/bindings/","title":"Cloudflare Workers bindings","quote":"What is a binding?","summary":"Defines bindings and how Worker code reaches account resources through the env object.","claim_ids":["c1","c12"]},{"id":"s2","type":"publisher_documentation","url":"https://developers.cloudflare.com/pages/functions/bindings/","title":"Cloudflare Pages Functions bindings","quote":"A binding enables your Pages Functions to interact with resources on the Cloudflare developer platform.","summary":"Documents the binding types available to Pages Functions and how environment-specific configuration works.","claim_ids":["c1","c2"]},{"id":"s3","type":"publisher_documentation","url":"https://developers.cloudflare.com/workers/runtime-apis/bindings/service-bindings/","title":"Cloudflare service bindings","quote":"Isolate services from the public Internet.","summary":"Explains private Worker-to-Worker calls and why STORE and META_BRIDGE do not need public routes.","claim_ids":["c1","c12","c3"]},{"id":"s4","type":"specification","url":"https://developers.cloudflare.com/workers/wrangler/configuration/","title":"Wrangler configuration reference","quote":"It is best practice to treat Wrangler's configuration file as the source of truth for configuring a Worker.","summary":"The reference for JSON and TOML configuration, environments, and the binding blocks reproduced in the inventory.","claim_ids":["c1","c2","c3"]},{"id":"s5","type":"publisher_documentation","url":"https://developers.cloudflare.com/workers/configuration/secrets/","title":"Cloudflare Workers secrets","quote":"Secrets are a type of binding that allow you to attach encrypted text values to your Worker.","summary":"Distinguishes encrypted secrets from ordinary variables and documents how code reads them without storing values in source.","claim_ids":["c4"]},{"id":"s6","type":"publisher_documentation","url":"https://developers.cloudflare.com/workers/platform/pricing/","title":"Cloudflare Workers pricing","quote":"The Workers Paid plan includes Workers, Pages Functions, Workers KV, Hyperdrive, and Durable Objects usage for a minimum charge of $5 USD per month for an account.","summary":"Rate card for Workers requests, CPU time, Pages Functions, and the account minimum used in the monthly arithmetic.","claim_ids":["c10","c5"]},{"id":"s7","type":"publisher_documentation","url":"https://developers.cloudflare.com/d1/platform/pricing/","title":"Cloudflare D1 pricing","quote":"Rows read 5 million / day First 25 billion / month included + $0.001 / million rows","summary":"Rate card and billing semantics for rows scanned, rows written, and D1 storage.","claim_ids":["c10","c12","c6"]},{"id":"s8","type":"publisher_documentation","url":"https://developers.cloudflare.com/kv/platform/pricing/","title":"Cloudflare Workers KV pricing","quote":"Workers KV pricing for read, write and delete operations is on a per-key basis.","summary":"Rate card for KV reads, writes, deletes, lists, and storage.","claim_ids":["c10","c12","c6"]},{"id":"s9","type":"publisher_documentation","url":"https://developers.cloudflare.com/r2/pricing/","title":"Cloudflare R2 pricing","quote":"There are no charges for egress bandwidth for any storage class.","summary":"Rate card for standard storage, Class A and Class B operations, with the no-egress-charge boundary.","claim_ids":["c10","c12","c6"]},{"id":"s10","type":"publisher_documentation","url":"https://developers.cloudflare.com/durable-objects/platform/pricing/","title":"Cloudflare Durable Objects pricing","quote":"and alarm invocations","summary":"Rate card for Durable Object requests, alarms, duration, and SQLite storage operations.","claim_ids":["c11","c12","c7"]},{"id":"s11","type":"publisher_documentation","url":"https://developers.cloudflare.com/queues/platform/pricing/","title":"Cloudflare Queues pricing","quote":"Operations are per message, not per batch.","summary":"Explains why one normal queue delivery is three billable operations: write, read, and acknowledgement.","claim_ids":["c10","c12","c6"]},{"id":"s12","type":"publisher_documentation","url":"https://developers.cloudflare.com/workflows/reference/pricing/","title":"Cloudflare Workflows pricing","quote":"Billing for Workflows steps and storage will apply starting August 10th, 2026.","summary":"Current step, storage, request, and CPU pricing, including the announced billing start date.","claim_ids":["c10","c12","c8"]},{"id":"s13","type":"publisher_documentation","url":"https://developers.cloudflare.com/browser-rendering/pricing/","title":"Cloudflare Browser Rendering pricing","quote":"Browser hours are shared across all methods.","summary":"Rate card and concurrency dimensions for Browser Rendering.","claim_ids":["c8"]},{"id":"s14","type":"publisher_documentation","url":"https://developers.cloudflare.com/email-routing/email-workers/send-email-workers/","title":"Send emails from Workers","quote":"Send a single email using the send() method on your email binding.","summary":"Documents the send_email binding, verified destinations, and the send() method.","claim_ids":["c23","c8"]},{"id":"s15","type":"publisher_documentation","url":"https://developers.cloudflare.com/durable-objects/reference/data-location/","title":"Durable Object data location","quote":"Durable Objects can be restricted to a specific jurisdiction by creating a DurableObjectNamespace restricted to a jurisdiction.","summary":"Documents eu, us, and fedramp jurisdiction restrictions for object state.","claim_ids":["c13"]},{"id":"s16","type":"publisher_documentation","url":"https://developers.cloudflare.com/data-localization/regional-services/","title":"Cloudflare Regional Services","quote":"Regional Services is an Enterprise add-on.","summary":"The product boundary for constraining where traffic is inspected and handled.","claim_ids":["c13"]},{"id":"s17","type":"publisher_documentation","url":"https://developers.cloudflare.com/pages/migrate-to-workers/","title":"Migrate from Pages to Workers","quote":"Migrate to Workers","summary":"Cloudflare's migration guide for moving Pages projects to Workers.","claim_ids":["c16"]},{"id":"s18","type":"specification","url":"https://developers.cloudflare.com/api/resources/d1/subresources/database/methods/query/","title":"D1 query API reference","quote":"Returns the query result as an object.","summary":"The exact POST route and response contract for executing SQL against a D1 database.","claim_ids":["c15","c9"]},{"id":"s19","type":"independent_measurement","url":"https://github.com/bruceharrison1984/kv-d1-benchmark","title":"KV versus D1 benchmark harness","quote":"d1_read Read existing value from D1 16ms","summary":"Open-source Worker harness comparing KV and D1 insert, read, and propagation timing in one zone; the author warns results vary by geography.","claim_ids":["c14","c21"]},{"id":"s20","type":"github","url":"https://github.com/cloudflare/workers-sdk/issues/14101","title":"Workflows (local `wrangler dev`): a ~200 KB `Uint8Array` step output fails with `string or blob too big: SQLITE_TOOBIG`, but the same bytes as an `ArrayBuffer` (or a 2 MB string) succeed","quote":"Workflows (local `wrangler dev`): a ~200 KB `Uint8Array` step output fails with `string or blob too big: SQLITE_TOOBIG`, but the same bytes as an `ArrayBuffer` (or a 2 MB string) succeed","summary":"Filed a minimal reproduction where a ~200 KB Uint8Array step output aborts the whole run with SQLITE_TOOBIG under the local Workflows engine, while identical bytes as an ArrayBuffer or a 2 MB string are fine. Negative — the SQLite size ceiling surfacing through the serialization path.","claim_ids":["c22"]},{"id":"s21","type":"github","url":"https://github.com/nuxt-modules/og-image/issues/193","title":"Deploying on Cloudflare Pages, script_too_large?","quote":"Tried deploying a branch with a simple template, it works well locally, but with the 1mb worker limit on Pages (free) I get the `workers.api.error.script_too_large` error as the compiled-wasm file is 2.4mb.","summary":"Works locally, dies on deploy: a 2.4mb compiled WASM asset blows the 1mb Pages Functions limit on the free plan. Asks whether the package is usable at all under that ceiling. Negative — bundle-size limit as a hard adoption wall.","claim_ids":["c22"]},{"id":"s22","type":"github","url":"https://github.com/cloudflare/workers-sdk/issues/9642","title":"Queue producer binding causes 500 errors on all routes when using `wrangler dev --remote`","quote":"When a queue producer is configured in `wrangler.toml`, ALL API routes return 500 Internal Server Error when using `wrangler dev --remote`, even routes that don't use the queue binding.","summary":"Simply declaring a queue producer binding breaks every route under wrangler dev --remote, while local dev and production are fine. Eight reactions indicate others hit it too. Negative.","claim_ids":["c22"]},{"id":"s23","type":"github","url":"https://github.com/cloudflare/workers-sdk/issues/10864","title":"Cloudflare Browser Rendering API (Code 7003/7000) Failure in Worker","quote":"Despite verified API token permissions and Account ID, the API consistently returns a 400 error.","summary":"A content-fetcher Worker calling the Browser Rendering REST endpoint gets consistent 400s with error codes 7003/7000 despite verified token permissions and account ID. Second filing of the same problem by the same user after an earlier issue. Negative.","claim_ids":["c22"]},{"id":"s24","type":"github","url":"https://github.com/opennextjs/opennextjs-cloudflare/issues/929","title":"[BUG] Durable Objects alarm not firing due to stale past alarms remaining in storage","quote":"If `nextAlarm` is a past timestamp, no new alarm is set, creating a deadlock where `alarm()` never fires and tags accumulate in the database.","summary":"One failed alarm handler leaves a past timestamp in DO storage forever, so all later scheduling calls skip setting a new alarm and cache purges silently stop working. A permanent deadlock from a single transient failure. Negative.","claim_ids":["c22"]},{"id":"s25","type":"hn","url":"https://news.ycombinator.com/item?id=47787042","title":"Durable Object alarm loop: $34k in 8 days, zero users, no platform warning","quote":"My DO agent's onStart() handler called this.ctx.storage.setAlarm() on every wake-up without checking whether an alarm was already scheduled.","summary":"Pre-launch solo founder posts a full postmortem: setAlarm() called unconditionally on every DO wake-up, multiplied by 60+ preview deployments each spawning independent DO instances, peaked at ~930 billion row reads/day and produced a $34,895 invoice with zero users. No platform warning fired. Negative.","claim_ids":["c11","c7"]},{"id":"s26","type":"hn","url":"https://news.ycombinator.com/item?id=44855519","title":"Cloudflare recommends migrating from Pages to Workers","quote":"I recently ported an entire TS project from cloudflare workers to a django python app since cloudflare workers don't support choice of region/country when deploying workers.","summary":"Ported a whole TypeScript Workers project off Cloudflare to a Django app because Workers offers no region/country placement choice outside Enterprise, which breaks data-residency compliance. Still calls Workers+R2+D1 a great low-overhead stack. Negative move-off.","claim_ids":["c13"]},{"id":"s27","type":"hn","url":"https://news.ycombinator.com/item?id=43607561","title":"Journey to Optimize Cloudflare D1 Database Queries","quote":"Using D1 in production for over an year on multiple projects - I can confirm response times to simple queries regularly take 400ms and beyond. On top there's constant network, connection and a plethora of internal errors.","summary":"Over a year of D1 in production across multiple projects. Reports 400ms+ on simple queries plus constant network, connection and internal errors, and explicitly does not recommend D1 for production. Negative.","claim_ids":["c14"]},{"id":"s28","type":"hn","url":"https://news.ycombinator.com/item?id=47797766","title":"Cloudflare's AI Platform: an inference layer designed for agents","quote":"D1 reliability has been bad in our experience. We've had queries hanging on their internal network layer for several seconds, sometimes double digits over extended periods (on the order of weeks).","summary":"Production user reporting multi-second to double-digit-second hung D1 queries persisting for weeks, plain network exceptions between Worker and D1 hosts, and hung queries invisible in the observability dashboard. Also cites no transactions. Negative.","claim_ids":["c14"]},{"id":"s29","type":"hn","url":"https://news.ycombinator.com/item?id=43614249","title":"Journey to Optimize Cloudflare D1 Database Queries","quote":"Another fun limitation is that a transaction cannot span multiple D1 requests, so you can't select from the database, execute application logic, and then write to the database in an atomic way.","summary":"Hit D1's lack of multi-request transactions and worked around it by packing a precondition check into the first statement of a batch that deliberately throws a JSON parse error to abort the rest. Says anything more complex would need temp tables and logic pushed into SQL. Negative.","claim_ids":["c15"]},{"id":"s30","type":"hn","url":"https://news.ycombinator.com/item?id=43610222","title":"Journey to Optimize Cloudflare D1 Database Queries","quote":"It’s not possible to set up per-user data in D1. Like in theory you probably could, but the DX infrastructure to make it possible is non-existent - you have to explicitly bind each database into your worker.","summary":"Tried the documented per-tenant D1 sharding pattern and found it impractical because every database must be explicitly bound into the Worker. Says a Cloudflare person on Discord confirmed Durable Objects is the only real path to tenancy sharding. Negative.","claim_ids":["c15"]},{"id":"s31","type":"hn","url":"https://news.ycombinator.com/item?id=38509302","title":"Lowstorage: JSON-based database for Cloudflare Workers and R2 buckets","quote":"I found the experience of maintaining and deploying workers to be terrible and so monorepo-unfriendly due to wrangler forced usage for deploys (or at least I haven't found better ways)","summary":"Ran a stack initially built around Cloudflare and moved it off to Azure. Cites wrangler-forced deploys, monorepo unfriendliness and general developer-experience neglect as the primary reason — not price. Negative; a documented move-off.","claim_ids":["c16"]},{"id":"s32","type":"hn","url":"https://news.ycombinator.com/item?id=43646198","title":"Journey to Optimize Cloudflare D1 Database Queries","quote":"This is kind of what happened (is happening) with pages right now. Workers gained pretty much all of their features and are now the recommended way to deliver static sites too.","summary":"A Cloudflare fan describing Pages being quietly superseded by Workers as feature parity landed, and predicting the same absorption will happen to Workers by Durable Objects. Mixed — approves the direction while documenting the churn.","claim_ids":["c16"]},{"id":"s33","type":"hn","url":"https://news.ycombinator.com/item?id=44854848","title":"Cloudflare recommends migrating from Pages to Workers","quote":"I had to use Pages since Workers don't support \"Custom domains outside Cloudflare zones\" [1]. There's no way I can transfer the domain since I have subdomains tightly integrated with AWS services.","summary":"Cannot follow Cloudflare's own Pages-to-Workers recommendation because Workers static assets do not support custom domains outside Cloudflare zones and his DNS is bound to AWS. Concrete migration blocker. Negative.","claim_ids":["c16"]},{"id":"s34","type":"hn","url":"https://news.ycombinator.com/item?id=47146087","title":"5 months ago I'd never coded anything. I now have full-stack analytics platform","quote":"Stack: Next.js 14 + React 18 on Cloudflare Pages, Hono 4.10 API on Cloudflare Workers (60+ route modules), 4x Cloudflare D1 databases (~180 tables total), Neon Postgres via Prisma + Hyperdrive, KV + R2 + Durable Objects + Queues","summary":"A self-described non-coder built and shipped a full NFL projections analytics platform entirely on the Cloudflare stack — Pages front end, Workers API, four D1 databases, plus KV, R2, Durable Objects and Queues, with Access-protected admin routes and 8 cron jobs. He reports it working in production at real schema depth. Positive.","claim_ids":["c17"]},{"id":"s35","type":"hn","url":"https://news.ycombinator.com/item?id=38964629","title":"Without saying \"it's scalable\", convince me that Serverless is worth it","quote":"In a week, from start to production, I migrated an AWS RDS database to Cloudflare D1 behind an OpenAPI REST interface over HTTPS using itty-router-openapi [1]. This will save me at least $250 pa","summary":"Migrated an AWS RDS-backed service to Workers + D1 in one week and put it in production. Claims ~$250/yr savings, no certificate or network admin, and now ships new services in hours. One lost day to an itty-router breaking change. Positive.","claim_ids":["c18"]},{"id":"s36","type":"hn","url":"https://news.ycombinator.com/item?id=48946048","title":"SQLite Is All You Need","quote":"We serve multi million MAU on sqlite orchestrated through durable objects. It's not the most complex thing in the world but it goes further than CRUD. It costs us such a small amount of money for what it does.","summary":"Runs multi-million monthly-active-user traffic on SQLite inside Durable Objects and says their previous Postgres cluster was orders of magnitude more expensive. Positive, at real scale.","claim_ids":["c19"]},{"id":"s37","type":"hn","url":"https://news.ycombinator.com/item?id=47785298","title":"Show HN: I rebuilt a 2000s browser strategy game on Cloudflare's edge","quote":"DO alarms handle the time-based stuff (fleet arrivals, combat resolution, resource ticks) so there's no persistent connection cost. so far costs have been negligible","summary":"Answering a direct question about DOs being prohibitively expensive for an MMO: because the game is tick-based rather than realtime, request rate per player is single-digit-per-minute and alarms replace persistent connections, so cost is negligible. Says websockets + stateful server would be right for anything realtime. Positive with a clearly stated boundary.","claim_ids":["c19"]},{"id":"s38","type":"hn","url":"https://news.ycombinator.com/item?id=48611834","title":"Temporary Cloudflare accounts for AI agents","quote":"It's almost always better to use Durable Objects storage, rather than D1. Even if you only want a single global database, it's better to implement that as a singleton Durable Object, than by using D1.","summary":"The Workers architect states D1 is literally a singleton Durable Object wrapping SQLite, so raw DOs give you code co-located with the database and near-zero query latency. Says D1 exists mainly for familiarity, with read replicas the one remaining D1 advantage. Positive on DOs, blunt about D1.","claim_ids":["c19","c20"]},{"id":"s39","type":"hn","url":"https://news.ycombinator.com/item?id=48672342","title":"OAuth for all","quote":"KV is not a distributed database and is really not intended as a database alternative at all. It's more meant for distributing bits of config globally. Cost aside, writes are way too slow for database-ish use","summary":"The Workers tech lead telling a user who had adopted KV as a datastore that this is a misuse: writes are too slow and eventual consistency is wrong for frequently-changing state, and to use Durable Objects SQLite or Hyperdrive instead. Negative on the common KV-as-database pattern.","claim_ids":["c20"]},{"id":"s40","type":"hn","url":"https://news.ycombinator.com/item?id=43608066","title":"Journey to Optimize Cloudflare D1 Database Queries","quote":"I am running 2 production apps on Cloudflare workers, both using D1 for primary storage. I found the performance ok, especially after enabling Smart Placement [1].","summary":"Runs two production apps with D1 as primary storage and finds performance acceptable once Smart Placement is enabled. The dissenting positive voice in an otherwise negative thread.","claim_ids":["c21"]},{"id":"s41","type":"hn","url":"https://news.ycombinator.com/item?id=45373715","title":"Cloudflare Email Service: private beta","quote":"Cloudflare's email routing has been abused by malicious users for so long that I can no longer reliably use it with my domain, most times Outlook just blocks Cloudflare IP ranges and emails never get routed to my Outlook mail box.","summary":"Long-time Email Routing user who can no longer rely on it because Outlook blocks Cloudflare's forwarding IP ranges, so forwarded mail silently never arrives. Negative — deliverability, the one thing Email Routing has to get right.","claim_ids":["c23"]},{"id":"s42","type":"runtime_receipt","url":"https://miscsubjects.com/a/cloudflare-os","title":"Configuration inventory reproduced from the production repository","quote":"9 request-layer bindings; 7 sibling Workers; 68 referenced environment names","summary":"First-party inventory taken from wrangler.toml and sibling Worker configurations, with account identifiers and secret values excluded.","claim_ids":["c1","c2","c24","c3","c4"]},{"id":"s43","type":"runtime_receipt","url":"https://miscsubjects.com/a/cloudflare-os","title":"Indexed and scanning D1 query comparison","quote":"\"rows_read\": 1 versus \"rows_read\": 2186","summary":"First-party remote D1 measurement: the slug index returned one row read in 0.1746 ms while a LIKE scan read 2,186 rows in 23.1205 ms.","claim_ids":["c24","c9"]},{"id":"s44","type":"runtime_receipt","url":"https://miscsubjects.com/a/cloudflare-os","title":"Production resource counts","quote":"387 JavaScript files; 91 content tables; 12 ledger tables; 3 R2 buckets; 6 KV namespaces","summary":"First-party commands published in the final section reproduce handler, table, row, R2, and KV counts without exposing credentials.","claim_ids":["c10","c24"]}],"anecdotal_sources":[],"scientific_sources":[],"user_reports":[],"related_articles":[],"question_graph":{"slug":"cloudflare-os","questions":[],"evidence":[],"edges":[],"counts":{"questions":0,"evidence":0,"edges":0}},"honesty":{"active_claims":24,"retracted_claims":0,"cut_claims":0,"challenges":0,"scrub_events":0,"note":"Retracted/cut claims stay on ledger but are excluded from ask unless ?include_inactive=1"},"counts":{"claims":24,"claims_total":24,"sources":44,"anecdotal":0,"scientific":0,"user_reports":0,"questions":0,"evidence_ingests":0}}