Capabilities
Boundaries, prerequisites and configuration notes for each capability
Zero Trust / SASE
Application Security
Bot Management
Bot Management is part of Cloudflare's network offerings on the Workers platform.
DDoS Protection
- Always-on mitigation - Unmetered protection - L3/L4/L7 coverage - Sub-second detection - 330+ city network - No performance impact - Zero configuration
Turnstile
Turnstile is part of Cloudflare's security offerings on the Workers platform.
WAF
- OWASP Top 10 protection - Zero-day vulnerability defense - Low false positive rate - API-managed rules - Content scanning - Custom rule support - Global edge enforcement
Network & Performance
CDN
- 330+ global locations - Zero-configuration setup - Instant cache purging - API-driven control - Predictable pricing - Static & dynamic caching - Core Web Vitals optimization
China Network
China Network is part of Cloudflare's network offerings on the Workers platform.
Magic Transit
Magic Transit is part of Cloudflare's sase offerings on the Workers platform.
Storage & Data
D1
- Serverless SQLite database - Global read replication - Native Workers integration - Time travel backups (30 days) - Prisma and Drizzle ORM support - Generated columns - Per-datab
R2
- Zero egress fees - S3-compatible API - Native Workers integration - Iceberg-compatible Data Catalog - Progressive migration from existing S3 buckets - Automatic replication for d
Compute
Durable Objects
- Single-instance strong consistency - Built-in WebSocket support - Transactional SQLite storage - Hibernation for cost efficiency - Alarms for scheduled wake-ups - Automatic geogr
Workers
- Zero cold starts with V8 isolates - Deploy to 330+ cities globally - JavaScript, TypeScript, Python, Rust, and WASM support - Native integration with R2, D1, KV, Queues, and Work