Rust

Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet.

Sebastiaan Neuteboom

We should be giving all agents tools that excel at what’s important for an AI model. Kitesurf is Cloudflare’s new stateless, highly scalable, and cost-effective web browser that runs entirely on top of Workers and was designed specifically for the Agentic Cloud.

Celso Martinho, Ruskin Constant, Rui Figueira, and Luís Duarte

pvcli is a curl-like tool designed to simplify the testing of complex privacy protocols like OHTTP.

Hannah Wang, Ben Yang, and Fisher Darling

We investigated a bug where CUBIC's congestion window became pinned at its minimum floor, causing a performance to plummet. The fix involved correctly measuring idle periods to distinguish RTT wait times from actual application idleness.

Esteban Carisimo and Antonio Vicente

Panics in Rust Workers were historically fatal, poisoning the entire instance. By collaborating upstream on the wasm‑bindgen project, Rust Workers now support resilient critical error recovery, including panic unwinding using WebAssembly Exception Handling.

Guy Bedford, Hood Chatham, and Logan Gatlin

By migrating our request handling layer to a Rust-based architecture called FL2, Cloudflare has increased its performance lead to 60% of the world’s top networks. We use real-user measurements and connection trimeans to ensure our data reflects the actual experience of people on the Internet.

Lai Yi Ohlsen

Cloudflare’s Gen 13 servers double our compute throughput by rethinking the balance between cache and cores. Moving to high-core-count AMD EPYC ™ Turin CPUs, we traded large L3 cache for raw compute density. By running our new Rust-based FL2 stack, we completely mitigated the latency penalty to unlock twice the performance.

Syona Sarma, JQ Lau, and Jesse Brandeburg

ecdysis is a Rust library enabling zero-downtime upgrades for network services. After five years protecting millions of connections at Cloudflare, it’s now open source.

Manuel Olguín Muñoz

As a proof of concept, we built a Matrix homeserver to Cloudflare Workers — delivering encrypted messaging at the edge with automatic post-quantum cryptography.

Nick Kuntz

Cloudflare’s R2 SQL, a distributed query engine, now supports aggregations. Explore how we built distributed GROUP BY execution, using scatter-gather and shuffling strategies to run analytics directly over your R2 Data Catalog.

Jérôme Schneider, Nikita Lapkov, and Marc Selwan

Cloudflare is launching an experiment with Chrome to evaluate fast, scalable, and quantum-ready Merkle Tree Certificates, all without degrading performance or changing WebPKI trust relationships.

Luke Valenta, Christopher Patton, Vânia Gonçalves, and Bas Westerbaan

We’ve replaced the original core system in Cloudflare with a new modular Rust-based proxy, replacing NGINX.

Richard Boulton, Steve Goldsmith, Maurizio Abba, and Matthew Bullock

R2 SQL provides a built-in, serverless way to run ad-hoc analytic queries against your R2 Data Catalog. This post dives deep under the Iceberg into how we built this distributed engine.

Yevgen Safronov, Nikita Lapkov, and Jérôme Schneider

Build and deploy real-time, decentralized Authenticated Transfer Protocol (ATProto) apps on Cloudflare Workers.

Inanna Malick

Learn about recent developments in Certificate Transparency (CT), and how we built a next-generation CT log on top of Cloudflare's Developer Platform.

Luke Valenta

h3i is a command line tool and Rust library designed for low-level testing and debugging of HTTP/3, which runs over QUIC.

Lucas Pardue and Evan Rittenhouse

Hyperdrive (Cloudflare’s globally distributed SQL connection pooler and cache) recently added support for directing database traffic from Workers across Cloudflare Tunnels.

Andrew Repp, Emilio Assunção, and Abhishek Chanda

Pingora handles 35M+ requests per second, so saving a few microseconds per request can translate to thousands of dollars saved on computing costs. In this post, we share how we freed up over 500 CPU

Kevin Guthrie