Articles tagged "Cloudflare"

Kitesurf is Cloudflare's stateless AI-agent browser, announced Aug 2026. Runs on Workers V8 isolates, no Chromium, cutting CPU/memory use 3-7x. Free in beta.

What does Cloudflare actually do, and how is it different from AWS or Azure? A plain-English overview of the features, benefits, and costs relevant to small business owners.

For businesses worried about slow websites or cyberattacks, this guide explains how CDN and WAF services can boost speed and security together, including cost ranges and pitfalls to watch for.

A minimal-cost infrastructure approach for small websites and apps is gaining attention. This article covers what it can and can't do, how it compares to traditional setups, and what to watch for when migrating.

**@ibocodes' X post — "my entire 2026 stack runs on cloudflare and I pay $5/month" — went viral** ([original tweet](https://x.com/ibocodes/status/2071238084922917082)). The claim: **Workers (compute) + D1 (SQL DB) + Better Auth + KV (cache) + R2 (object storage) + Queues (background jobs) + Hyperdrive (DB acceleration) + Email Routing (sending) + built-in WAF / DDoS** — all on a $5/month floor, capped around $10 in the worst case. This column **fact-checks that claim against Cloudflare's published pricing**, walks through each of the eight services, calls out real-world cost inflection points, covers the Better Auth integration pattern, and situates the stack next to our prior [Cloudflare Durable Objects](../columns/cloudflare-durable-objects-2026-07) and [Flue Framework](../columns/flue-framework-astro-team-agent-2026-07) columns. **Real pricing structure**: the Workers **Paid plan is a $5/month floor** and covers Workers itself + KV + Hyperdrive + some Durable Objects usage. D1, R2, and Queues layer on with **generous free tiers plus usage-based billing**. **For a solo SaaS in its early stage, $5–10/month really is enough**, but at production scale (DB reads, R2 storage, Queue messages) bills commonly stretch to **$30–100/month**. **Better Auth × D1**: [zpg6/better-auth-cloudflare](https://github.com/zpg6/better-auth-cloudflare) provides a CLI that auto-provisions **Workers + D1 + Hyperdrive + KV + R2 + geolocation** end-to-end. Both Drizzle ORM and native D1 are supported, with guides for Hono / Next.js / React Router / SvelteKit. **The critical implementation pattern**: create a Better Auth instance **per request** (never a shared singleton) so the D1 binding for that request is injected correctly. Note also **Better Auth's session-refresh bug #4203**, which was reopened in January 2026. **The eight services**: - **Workers** — global serverless compute with near-zero cold-start - **D1** — distributed SQLite-based SQL DB with scale-to-zero billing - **KV** — eventually-consistent key-value store (read-heavy, edge-cache use) - **R2** — S3-compatible object storage with **zero egress cost** - **Queues** — message queue with **no egress fees** and at-least-once delivery - **Hyperdrive** — connection pooling and edge caching for external Postgres / MySQL, available even on the Workers Free plan - **Email Routing** — transactional email sending via Workers bindings or REST API - **WAF & DDoS** — included in every plan, with industry-leading DDoS protection **Natural companions**: pair with [Durable Objects](../columns/cloudflare-durable-objects-2026-07) for strong-consistency state + WebSockets, and [Flue Framework](../columns/flue-framework-astro-team-agent-2026-07) for the AI-agent layer — the **all-Cloudflare distributed system** is genuinely deployable end-to-end. **Caveats**: single-vendor lock-in (AWS / GCP migration costs), **CPU-heavy work is a bad fit for Workers** (AI inference and heavy image processing need Cloudflare AI or external GPU), **D1's write-throughput ceiling** (high-write workloads belong on Durable Objects), and **Better Auth's rough edges** (the session bug and a few other issues). Even so, the honest conclusion is that **the era where 90% of individual / startup / mid-market SaaS runs entirely on Cloudflare has arrived**.

**Cloudflare Durable Objects** ([official docs](https://developers.cloudflare.com/durable-objects/) / [product page](https://www.cloudflare.com/products/durable-objects/) / [SQLite in Durable Objects blog](https://blog.cloudflare.com/sqlite-in-durable-objects/)) is Cloudflare's **stateful serverless primitive that pairs compute with persistent storage inside a globally-unique instance running on Workers**. Announced in 2020, it reached **GA on SQLite storage with Workers Free-tier availability in April 2025**, then **entered its paid-billing phase on January 7, 2026** — this is now the commercial-adoption era. **Architectural core**: a **`DurableObjectStub`** derived from a name (`DurableObjectNamespace::getByName`) always routes to the single, globally-unique instance for that name → **zero-latency SQLite access** because compute and storage co-reside in the same process on the same machine. This delivers **strong-consistency single-master semantics at edge latency** — a class of distributed system that is famously hard to DIY, replaced with a single platform primitive. **Pricing** (Paid tier): - **Requests**: 1M/month included, then **$0.15 / 1M** (WebSocket inbound counts at 20:1) - **Duration**: 400,000 GB-seconds/month included, then **$12.50 / 1M GB-seconds** - **SQLite row reads**: 25B/month included, then **$0.001 / 1M** - **SQLite row writes**: 50M/month included, then **$1.00 / 1M** - **Stored data**: 5 GB-month included, then **$0.20 / GB-month** - **`setAlarm()` counts as one row write** **Free tier** (launched April 2025): 100,000 requests/day, 13,000 GB-seconds/day, 5M SQLite row reads/day, 100K writes/day, and 5 GB stored data — plenty for personal PoC and startup validation. **WebSocket Hibernation**: idle-but-eligible instances **do not accrue duration charges**. Long-lived sparse-messaging sessions (chat, notifications, LLM conversation state) become dramatically cheaper to run. **Key 2025–2026 updates**: April 7, 2025 SQLite GA + Workers Free; August 21, 2025 direct `getByName` construction; October 16, 2025 Data Studio UI editor; **October 25, 2025 WebSocket message size lifted from 1 MiB to 32 MiB**; January 7, 2026 SQLite storage billing goes live. **Representative use cases**: collaborative editing (Google-Docs-class), real-time chat, multiplayer game room-matching, live notifications, **LLM agent conversation and session state** (backend for Claude Code / Cursor-style tools), financial and IoT event buffering, distributed rate limits and locks. **Positioning**: where [Local LLM landscape (June 2026)](../columns/local-llm-landscape-2026-june-update), [agmsg](../columns/agmsg-cross-agent-messaging-cli-ai-2026-06), and [Sakana Fugu orchestration](../columns/sakana-fugu-orchestration-model-2026-06) distribute AI **inference**, Durable Objects distribute **stateful session, history, and coordination** at the edge — a natural complement rather than a competitor.

EmDash by Cloudflare is a serverless CMS running on Astro 6.0 and Cloudflare Workers. Explore how this next-generation platform addresses WordPress challenges and impacts SMBs.

Addressing the 96% plugin-origin security issue in WordPress, EmDash implements complete sandboxing with v8 isolates. Exploring next-generation CMS security architecture.

Cloudflare's EmDash revolutionizes SMB web costs with serverless CMS architecture, offering 80%+ cost reduction through CPU-time billing and scale-to-zero capabilities.