Website · Documentation · Pricing
Overview
Cloudflare proxies HTTP traffic through shared Anycast addresses, combining caching with web security. Routing follows Internet network policy and conditions rather than a guarantee of the nearest city.
Web subscriptions, Workers, Stream, Images and other products have different limits and billing. Choose the product for the workload before comparing features or cost.
Network
Cloudflare publishes named network cities across eight regions. The map plots locations that can be matched to city centers; these are approximate geography, not facility addresses or a performance guarantee.
Anycast routing follows network policy and conditions. Test the access networks that matter to your audience.
Mainland-China locations belong to a separate Enterprise subscription operated with JD Cloud. Each apex domain needs the required ICP filing or license and onboarding; product availability differs from the global network.
Approximate named-city locations, not facility addresses. Mainland-China serving requires a separate Enterprise subscription; service availability varies. Unmatched names remain listed without pins.
Cities
Albuquerque, Anchorage, Atlanta, Austin, Bangor, Boston, Buffalo, Calgary, Charlotte, Chicago, Cincinnati, Cleveland, Dallas, Denver, Detroit, Halifax, Honolulu, Houston, Indianapolis, Los Angeles, Memphis, Miami, Minneapolis, Montréal, Nashville, Newark, Oklahoma City, Omaha, Philadelphia, Phoenix, Pittsburgh, Sacramento, Salt Lake City, San Antonio, San Diego, San Jose, Saskatoon, Seattle, Sioux Falls, Tallahassee, Tampa, Toronto, Vancouver, Winnipeg, Americana, Aracatuba, Arica, Asuncion, Barranquilla, Belo Horizonte, Belém, Blumenau, Bogota, Brasília, Bridgetown, Buenos Aires, Cali, Campinas, Caçador, Concepción, Cordoba, Cuiabá, Curitiba, Florianópolis, Fortaleza, Georgetown, Goiânia, Guadalajara, Guatemala City, Guayaquil, Joinville, Juazeiro do Norte, Kingston, La Paz, Lima, Manaus, Medellín, Mexico City, Neuquen, Panama City, Paramaribo, Port of Spain, Porto Alegre, Queretaro, Quito, Recife, Ribeirão Preto, Rio de Janeiro, Salvador, San José, San Juan, San Pedro Sula, Santiago, Santo Domingo, Sorocaba, São José do Rio Preto, São José dos Campos, São Paulo, Tegucigalpa, Uberlândia, Valparaíso, Vitoria, Amsterdam, Athens, Barcelona, Belgrade, Berlin, Bordeaux, Bratislava, Brussels, Bucharest, Budapest, Chișinău, Dublin, Düsseldorf, Frankfurt, Geneva, Hamburg, Helsinki, Istanbul, Izmir, Krasnoyarsk, Kyiv, Lisbon, Ljubljana, London, Luxembourg City, Lyon, Madrid, Manchester, Marseille, Milan, Minsk, Moscow, Munich, Nicosia, Oslo, Palermo, Paris, Prague, Reykjavík, Riga, Rome, Skopje, Sofia, Stockholm, Stuttgart, Tallinn, Thessaloniki, Tirana, Vienna, Vilnius, Warsaw, Wrocław, Zagreb, Zürich, Amman, Baghdad, Basra, Beirut, Dammam, Doha, Dubai, Haifa, Jeddah, Kuwait City, Manama, Muscat, Najaf, Ramallah, Riyadh, Tel Aviv, Abidjan, Accra, Addis Ababa, Algiers, Annaba, Antananarivo, Cairo, Cape Town, Constantine, Dakar, Dar Es Salaam, Djibouti, Douala, Durban, Gaborone, Harare, Johannesburg, Kampala, Kigali, Kinshasa, Lagos, Luanda, Lusaka, Maputo, Mombasa, Nairobi, Oran, Ouagadougou, Port Louis, Tunis, Windhoek, Yamoussoukro, Agra, Ahmedabad, Almaty, Astana, Baku, Bandar Seri Begawan, Bangalore, Bangkok, Bhubaneswar, Bishkek, Cagayan de Oro, Cebu, Chandigarh, Chennai, Chiang Mai, Chittagong, Coimbatore, Colombo, Da Nang, Denpasar, Dhaka, Dushanbe, Fukuoka, Hanoi, Ho Chi Minh City, Hong Kong, Hyderabad, Islamabad, Jakarta, Johor Bahru, Kanpur, Kaohsiung City, Karachi, Kathmandu, Kochi, Kolkata, Kuala Lumpur, Kuching, Lahore, Ludhiana, Macau, Malang, Male, Manila, Mumbai, Nagpur, Naha, New Delhi, Osaka, Patna, Phnom Penh, Pune, Sambalpur, Seoul, Singapore, Surat Thani, Taipei, Tbilisi, Thimphu, Tokyo, Udaipur, Ulaanbaatar, Vientiane, Yerevan, Yogyakarta, Baoji, Beijing, Changde, Changsha, Changzhou, Chengdu, Chongqing, Dalian, Foshan, Guangzhou, Guiyang, Haikou, Hengshui, Jiaxing, Jinan, Kunming, Langfang, Luoyang, Nanchang, Qingdao, Shanghai, Shaoxing, Shenzhen, Shijiazhuang, Xiangyang, Xingyi, Yangquan, Zhengzhou, Zibo, Adelaide, Auckland, Brisbane, Canberra, Christchurch, Hobart, Melbourne, Nouméa, Perth, Suva, Sydney, Wellington
Listed without a marker: .
Features
| Feature | Supported |
|---|---|
| Web application firewall | ◐ Partial |
| Bot protection | ◐ Partial |
| DDoS protection | ✓ Supported |
| Rate limiting | ◐ Partial |
| HTTP/3 (QUIC) | ✓ Supported |
| TLS 1.3 | ✓ Supported |
| Tiered caching | ◐ Partial |
| Origin shield | ◐ Partial |
| Instant cache purge | ✓ Supported |
| Serve stale while refreshing | ◐ Partial |
| Serve stale on origin errors | ◐ Partial |
| Image optimization | ◐ Partial |
| On-demand video | ◐ Partial |
| Live video | ◐ Partial |
| Digital rights management | Not listed |
| HLS / DASH packaging | ◐ Partial |
| WebSockets | ✓ Supported |
| Signed URLs | ◐ Partial |
| Edge compute | ◐ Partial |
| Edge functions | ◐ Partial |
| Key-value storage | ◐ Partial |
| Configuration API | ✓ Supported |
| Real-time logs | ◐ Partial |
| Log export | ◐ Partial |
| Terraform provider | ✓ Supported |
✓ Supported · Partial: limited or separate-product support · ✗ Not supported · Not listed: unconfirmed. Some features need a separate product or plan.
Web delivery and security
- Viewer-side HTTP/3 and TLS 1.3 are available across web plans. WebSocket proxying supports upgraded connections; WAF inspection applies to the initial upgrade.
- Instant purge supports URLs, tags, hosts and prefixes, with operation limits by plan.
- WAF rules, bot controls and request rate limits vary by tier. DDoS protection is part of the web platform.
- Tiered caching and SmartShield can reduce origin work. Check the chosen topology and add-on terms.
Application and media products
- Workers runs application code; KV, Queues and scheduled handlers have their own limits and charges.
- Stream handles RTMPS/SRT live ingest, on-demand video and HLS/DASH playback. Signed tokens can restrict access. It is a separate media service.
- Images offers image processing and delivery. Web Analytics measures browser performance.
Cache and observability limits
Stale-while-revalidate and stale-if-error depend on response headers and cache configuration. Always Online and the Workers Cache API have different behavior.
Instant Logs provides live, potentially sampled HTTP request sessions on Business and Enterprise. Logpush exports product-dependent datasets in batches; it is not the same as a continuous live session.
Pricing
- Monthly web subscriptions per zone: Free $0, Pro $25 and Business $250. Annual billing is $20/month for Pro and $200/month for Business; Contract pricing is negotiated.
- The calculator shows the monthly subscription for the small-files web preset. Optional products, origin costs and taxes are separate; check that the web plan accepts your workload.
- Video, audio and disproportionate large-file delivery require an appropriate product or agreement. Use a quote for those workloads.
- Workers, Stream, Images, SmartShield/Argo and other add-ons have separate prices or allowances. Mainland-China service is a separate Enterprise subscription.
Developer tools
- Use product APIs or the official Terraform provider to manage supported resources. Confirm resource coverage for the selected product.
- Logpush exports supported datasets to storage, SIEM and log-management destinations. Dataset eligibility depends on the products enabled on the account.
- Instant Logs sessions are limited to one active session per zone and stop after 60 minutes. They are useful for investigation, rather than permanent archival.
- Workers APIs and deployment tooling manage application code, bindings and schedules separately from ordinary CDN settings.
When it fits
- Websites that can route traffic through a reverse proxy and want caching with security controls.
- Teams that can select plan limits and automate resources through APIs or Terraform.
- Applications designed for Workers, or media services that deliberately choose Stream and its separate billing.
- Mainland-China delivery when an Enterprise agreement, separate subscription and domain onboarding meet the project requirements.
Before you choose
- Video, bulk files and developer-platform usage need the appropriate product or agreement.
- Traffic must pass through the proxy; origin-side HTTP/3 is not supported.
- Moving proprietary edge code between CDNs requires a compatibility layer.
- Mainland-China delivery needs a separate agreement and domain-registration arrangements.
Sources
- developers.cloudflare.com/fundamentals/concepts/how-cloudflare-works/
- www.cloudflare.com/network/
- www.cloudflare.com/plans/
- developers.cloudflare.com/logs/logpush/
- developers.cloudflare.com/terraform/
- developers.cloudflare.com/api/
- developers.cloudflare.com/workers/platform/limits/
- developers.cloudflare.com/waf/
- developers.cloudflare.com/ddos-protection/
- developers.cloudflare.com/waf/rate-limiting-rules/
- developers.cloudflare.com/stream/stream-live/
- developers.cloudflare.com/fundamentals/reference/policies-compliances/delivering-videos-with-cloudflare/
- developers.cloudflare.com/changelog/rss/cache.xml
- www.cloudflare.com/our-story/
- developers.cloudflare.com/china-network/
- developers.cloudflare.com/speed/optimization/protocol/http3/
- developers.cloudflare.com/ssl/edge-certificates/additional-options/tls-13/
- developers.cloudflare.com/network/websockets/
- developers.cloudflare.com/cache/how-to/tiered-cache/
- developers.cloudflare.com/cache/concepts/cache-control/
- developers.cloudflare.com/cache/how-to/purge-cache/
- developers.cloudflare.com/logs/instant-logs/
- developers.cloudflare.com/kv/
- developers.cloudflare.com/queues/
- developers.cloudflare.com/workers/configuration/cron-triggers/
- developers.cloudflare.com/images/
- developers.cloudflare.com/web-analytics/
- developers.cloudflare.com/stream/viewing-videos/securing-your-stream/
- www.naturalearthdata.com/
- aws.amazon.com/s3/pricing/
- cloud.google.com/storage/pricing
