<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Cloudflare Developer — Things Worth Sharing</title><description>Posts tagged Cloudflare Developer.</description><link>https://cloudsecop.net/</link><item><title>Migrating AWS/Vercel to Cloudflare: a real playbook</title><link>https://cloudsecop.net/en/blog/migration-aws-to-cloudflare-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/migration-aws-to-cloudflare-en/</guid><description>Playbook for migrating a production app from AWS (Lambda, DynamoDB, RDS, S3, SQS, ElastiCache) to Cloudflare: per-primitive mapping, 3 strategies, cutover, rollback, 10 pitfalls.</description><pubDate>Sun, 28 Dec 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Migration</category><category>AWS</category><category>Serverless</category><author>KhaVan</author></item><item><title>Cloudflare Developer Platform cost model: tiers vs AWS</title><link>https://cloudsecop.net/en/blog/cost-model-production-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/cost-model-production-en/</guid><description>Per-primitive Cloudflare pricing (Workers, D1, KV, R2, Queues, DOs, Vectorize, Workers AI), tier breakpoints, AWS comparison, and 3 scale scenarios from blog to 100M req/month.</description><pubDate>Sun, 21 Dec 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Cost</category><category>AWS</category><category>Pricing</category><author>KhaVan</author></item><item><title>Worker security: secrets, CSP, Bot Management, Turnstile</title><link>https://cloudsecop.net/en/blog/secrets-csp-bot-management-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/secrets-csp-bot-management-en/</guid><description>Defense-in-depth for Cloudflare Workers: WAF + Bot Management, Turnstile, Access JWT, secret management, CSP/HSTS, 4 auth patterns, Zod validation, and anti-patterns to avoid.</description><pubDate>Sat, 13 Dec 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Security</category><category>CSP</category><category>Bot Management</category><author>KhaVan</author></item><item><title>Worker observability: Logs, Tail Workers, Analytics</title><link>https://cloudsecop.net/en/blog/logs-analytics-tail-workers-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/logs-analytics-tail-workers-en/</guid><description>Cloudflare&apos;s 4 observability layers: Workers Logs (3-day retention), Tail Workers (realtime), Logpush (batch to R2/SIEM), Analytics Engine. Structured logging, alerts, debugging.</description><pubDate>Fri, 05 Dec 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Observability</category><category>Logs</category><category>Analytics Engine</category><author>KhaVan</author></item><item><title>Stream + Images: edge media pipelines on Cloudflare</title><link>https://cloudsecop.net/en/blog/stream-images-media-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/stream-images-media-en/</guid><description>Cloudflare&apos;s 3 media products: Stream (video, HLS/DASH), Images (upload-transform-deliver), and Image Resizing / cf.image. Pipelines, pricing, and when to pick which.</description><pubDate>Fri, 28 Nov 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Stream</category><category>Images</category><category>Media</category><author>KhaVan</author></item><item><title>Durable Objects for realtime: chat, collab, game state</title><link>https://cloudsecop.net/en/blog/durable-objects-realtime-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/durable-objects-realtime-en/</guid><description>Durable Objects are Cloudflare&apos;s single-writer primitive: 1 roomId = 1 instance, WebSocket Hibernation, persistent storage. 6 patterns, the API, and when DOs are overkill.</description><pubDate>Thu, 20 Nov 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Durable Objects</category><category>WebSocket</category><category>Realtime</category><author>KhaVan</author></item><item><title>Vectorize + RAG: embeddings, top-K, hybrid from markdown</title><link>https://cloudsecop.net/en/blog/vectorize-rag-pattern-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/vectorize-rag-pattern-en/</guid><description>Vectorize is Cloudflare&apos;s native vector DB, paired with Workers AI bge-m3 for full-edge RAG. Ingest + query pipelines, chunking, metadata, hybrid search with D1, reranking.</description><pubDate>Wed, 12 Nov 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Vectorize</category><category>RAG</category><category>AI</category><author>KhaVan</author></item><item><title>Workers AI + AI Gateway: catalog, pricing, vs Bedrock/OpenAI</title><link>https://cloudsecop.net/en/blog/workers-ai-model-catalog-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/workers-ai-model-catalog-en/</guid><description>Workers AI on edge GPUs, AI Gateway proxying OpenAI/Anthropic/Bedrock/Google with cache + rate limit + observability. Catalog, pricing, when to use which, retry/fallback.</description><pubDate>Tue, 04 Nov 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Workers AI</category><category>AI Gateway</category><category>LLM</category><author>KhaVan</author></item><item><title>CI/CD with Wrangler + GitHub Actions: pipeline, smoke tests</title><link>https://cloudsecop.net/en/blog/ci-cd-wrangler-github-actions-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/ci-cd-wrangler-github-actions-en/</guid><description>A 4-step pipeline: test → build → deploy → smoke. Scoped API token, 19-assertion smoke test, concurrent lock, preview envs, 10-second rollback. Full workflow file from this blog.</description><pubDate>Tue, 28 Oct 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>CI/CD</category><category>GitHub Actions</category><category>Wrangler</category><author>KhaVan</author></item><item><title>Astro, Remix, SvelteKit on Workers: adapters and trade-offs</title><link>https://cloudsecop.net/en/blog/astro-remix-sveltekit-workers-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/astro-remix-sveltekit-workers-en/</guid><description>Three full-stack frameworks on Workers differ in rendering, default JS, adapter, bindings. Real setup for each, SSG vs SSR vs hybrid, and why this blog picked Astro.</description><pubDate>Mon, 20 Oct 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Astro</category><category>Remix</category><category>SvelteKit</category><author>KhaVan</author></item><item><title>ORMs for D1: Drizzle, Prisma, or raw SQL</title><link>https://cloudsecop.net/en/blog/orm-d1-drizzle-prisma-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/orm-d1-drizzle-prisma-en/</guid><description>Three choices: raw SQL (0KB), Drizzle (10KB, TS-first), Prisma (500KB WASM). Workflow, complex queries, migrations, type safety, and when an ORM costs more than it helps.</description><pubDate>Sun, 12 Oct 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>D1</category><category>ORM</category><category>Drizzle</category><category>Prisma</category><author>KhaVan</author></item><item><title>Picking a Worker router: vanilla, Itty, or Hono</title><link>https://cloudsecop.net/en/blog/router-choice-hono-itty-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/router-choice-hono-itty-en/</guid><description>Three options: vanilla fetch (0 bundle), Itty Router (3KB), Hono (13KB). Syntax, middleware, Zod validation, when to pick which, and why this blog uses vanilla at 40+ routes.</description><pubDate>Sun, 05 Oct 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Workers</category><category>Routing</category><author>KhaVan</author></item><item><title>Queues and Durable Objects: async messaging and state</title><link>https://cloudsecop.net/en/blog/queues-durable-objects-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/queues-durable-objects-en/</guid><description>Two of the hardest Worker primitives. Queues for fire-and-forget jobs with retry and DLQ. Durable Objects for single-writer coordination. When to pick which, with real patterns.</description><pubDate>Sat, 27 Sep 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Queues</category><category>Durable Objects</category><category>Storage</category><author>KhaVan</author></item><item><title>R2 object storage: S3-compat, zero egress, and 4 access patterns</title><link>https://cloudsecop.net/en/blog/r2-object-storage-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/r2-object-storage-en/</guid><description>R2 is Cloudflare&apos;s S3-compatible object storage with no egress fees. R2 vs S3 in real costs, 4 access patterns, S3 migration, and gotchas around consistency, metadata, lifecycle.</description><pubDate>Fri, 19 Sep 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>R2</category><category>Storage</category><author>KhaVan</author></item><item><title>D1 in production: primary-replica, batch, and 7 gotchas</title><link>https://cloudsecop.net/en/blog/d1-production-patterns-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/d1-production-patterns-en/</guid><description>D1 is SQLite at the edge with a primary region and read replicas: architecture, the 5 query methods, Sessions API, prepared-statement cache, and 7 production gotchas.</description><pubDate>Thu, 11 Sep 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>D1</category><category>Storage</category><category>SQL</category><author>KhaVan</author></item><item><title>KV deep-dive: global cache, eventual consistency, KV vs D1</title><link>https://cloudsecop.net/en/blog/kv-deep-dive-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/kv-deep-dive-en/</guid><description>Cloudflare KV is an eventually-consistent KV store with per-PoP caching. The real consistency model, limits that matter, 5 good patterns, 3 anti-patterns, and real gotchas.</description><pubDate>Thu, 04 Sep 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>KV</category><category>Storage</category><author>KhaVan</author></item><item><title>Wrangler + Miniflare dev loop: init to deploy in 30 minutes</title><link>https://cloudsecop.net/en/blog/wrangler-miniflare-dev-loop-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/wrangler-miniflare-dev-loop-en/</guid><description>The practical dev loop for Workers: wrangler init, local wrangler dev with Miniflare, vitest, D1 migrations, secrets, deploying to 300+ PoPs in 30 seconds. Plus CI/CD and gotchas.</description><pubDate>Wed, 27 Aug 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Workers</category><category>DevOps</category><author>KhaVan</author></item><item><title>The 3-binding mental model: Request, Identity, Storage</title><link>https://cloudsecop.net/en/blog/mental-model-3-bindings-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/mental-model-3-bindings-en/</guid><description>A common frame for every Worker: Request is the entry point, Identity is who&apos;s calling, Storage is where you read and write. Applied to the Worker running this blog.</description><pubDate>Sat, 23 Aug 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Workers</category><category>Architecture</category><author>KhaVan</author></item><item><title>Workers runtime mental model: lifecycle, context, limits</title><link>https://cloudsecop.net/en/blog/workers-runtime-mental-model-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/workers-runtime-mental-model-en/</guid><description>The fetch handler, ExecutionContext, waitUntil, subrequest limits, CPU vs wall time, real cold starts. Six misconceptions from Node/Lambda. Code samples from this blog&apos;s Worker.</description><pubDate>Tue, 12 Aug 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Workers</category><category>Runtime</category><author>KhaVan</author></item><item><title>What the Cloudflare developer platform actually is</title><link>https://cloudsecop.net/en/blog/cloudflare-developer-platform-intro/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/cloudflare-developer-platform-intro/</guid><description>Cloudflare is no longer just a CDN. Workers, D1, R2, KV, Queues, DOs, Workers AI, and Vectorize form an edge-native platform. The mental model, contrasted with Lambda.</description><pubDate>Mon, 04 Aug 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Workers</category><category>Edge Computing</category><author>KhaVan</author></item></channel></rss>