Cloudflare Skills

The Cloudflare Agents SDK is designed for building stateful, globally distributed AI agents hosted on Durable Objects. It provides built-in support for persistent memory, real-time WebSocket connections, scheduled tasks, async workflows, and SQL integration.

Use this SDK when your agent requires:

• Persistent state and memory.
• Real-time WebSocket connections.
• Long-running workflows (minutes or hours).
• Chat interfaces with AI models.
• Scheduled or recurring tasks that maintain state.
• Database queries that depend on agent state.

Cloudflare Network Interconnect (CNI) provides private, high-performance connectivity to the Cloudflare network. This is an Enterprise-only service.

Connection Types

• Direct: Physical fiber in a shared datacenter (10/100 Gbps). Requires ordering a cross-connect.
• Partner: Virtual connectivity via partner SDN providers such as Console Connect, Equinix, or Megaport.
• Cloud: Connectivity via AWS Direct Connect or GCP Cloud Interconnect (available via Magic WAN only).

Dataplane Versions

• v1 (Classic): Supports GRE tunnels, VLAN/BFD/LACP, asymmetric MTU (1500↓/1476↑), and peering support.
• v2 (Beta): Does not support GRE. Uses 1500 MTU both ways. Does not support VLAN/BFD/LACP (uses ECMP instead).

Durable Objects (DO) are stateful serverless packages that combine compute and storage into globally-unique, strongly-consistent instances.

Key characteristics:

• Globally unique instances: Each DO has a unique ID used for multi-client coordination.
• Co-located storage: Provides fast, strongly-consistent storage alongside compute.
• Automatic placement: Objects are automatically spawned near the location of the first request.
• Stateful serverless: Supports both in-memory state and persistent storage.
• Single-threaded: Processes requests serially, which prevents race conditions.

Cloudflare Bot Management provides multi-tier protection based on your subscription plan:

• Free (Bot Fight Mode): Automatically blocks definite bots with no user configuration.
• Pro/Business (Super Bot Fight Mode): Offers configurable actions, protection for static resources, and analytics groupings.
• Enterprise (Bot Management): Provides granular bot scores (1-99), WAF integration, JA3/JA4 fingerprinting, access to the Workers API, and Advanced Analytics.

Cloudflare Workers Analytics Engine is a time-series analytics database designed for high-cardinality data, meaning it can handle millions of unique dimensions (e.g., user IDs, API keys) without performance degradation. It allows you to write data points directly from Workers and query them using a SQL API.

Common Use Cases:

• Custom user-facing analytics dashboards
• Usage-based billing and metering
• Per-customer or per-feature monitoring
• High-frequency instrumentation without impacting performance.

Cloudflare Pipelines is a streaming ingest system that allows you to receive events via HTTP, Workers, or Logpush, transform them using SQL, and write the results to R2.

Core Architecture

The system consists of three main components:

1. Stream: The entry point that receives events (via HTTP endpoint, Worker binding, or Logpush). Events can be structured (schema-validated) or unstructured.
2. Pipeline: A SQL-based layer that connects a stream to a sink. It performs row-level transformations only; it does not support GROUP BY or other aggregations.
3. Sink: The destination layer that writes data to R2, either as Iceberg tables (via Data Catalog) or as raw Parquet/JSON files.

Note: The service is currently in Open Beta. Production use requires a Workers Paid plan.

Cloudflare Pages is a JAMstack platform designed for deploying full-stack applications on Cloudflare's global network. It supports static assets combined with dynamic logic via Pages Functions (which run on the Workers runtime).

Key Features:

• Git-based deploys: Automatic deployments from GitHub or GitLab.
• Preview deployments: Generates a unique URL for every branch or Pull Request.
• Pages Functions: Provides file-based serverless routing using the Workers runtime.
• Smart Placement: Automatically optimizes function execution based on traffic patterns.
• Framework Optimized: Native support for frameworks like SvelteKit, Astro, Nuxt, Qwik, and Solid Start.

Cloudflare Spectrum is a global Layer 4 (L4) reverse proxy that provides security and acceleration for non-HTTP/HTTPS protocols. It runs on Cloudflare's edge nodes to mask origins and protect against DDoS attacks for any TCP or UDP-based application.

When to use Spectrum: Use Spectrum when your protocol is not HTTP or HTTPS. While Cloudflare's standard proxy handles web traffic, Spectrum is designed for protocols such as:

• SSH
• Gaming (e.g., Minecraft)
• MQTT/IoT
• SMTP/Email
• Databases
• RDP
• Custom TCP/UDP protocols

Cloudflare TURN (Traversal Using Relays around NAT) Service is a managed relay service designed for WebRTC applications. It acts as a relay point for traffic between WebRTC clients and SFUs (Selective Forwarding Units) when direct peer-to-peer communication is obstructed by NATs or firewalls. The service utilizes Cloudflare's global anycast network across 310+ cities to connect clients to the nearest location automatically.

Key Characteristics:

• Anycast Architecture: Automatic connection to the closest Cloudflare location.
• Global Network: Available across Cloudflare's network (excluding China Network).
• Zero Configuration: No manual region or server selection required.
• Protocol Support: Supports STUN/TURN over UDP, TCP, and TLS.
• Pricing: Free when used with Cloudflare Calls SFU; otherwise, it costs $0.05/GB outbound.

Cloudflare Images is an end-to-end image management solution. It provides storage, transformation, optimization, and delivery at scale using Cloudflare's global network.

Key features include:

• Automatic Optimization: Automatic format negotiation for AVIF/WebP.
• On-the-fly Transforms: Resize, crop, blur, and sharpen images via URL or API.
• Workers Binding: The primary method (as of 2026) to transform images directly within a Cloudflare Worker.
• Direct Upload: Allows secure client-side uploads without requiring a backend proxy.
• Global Delivery: Images are cached across 300+ Cloudflare data centers.
• Watermarking: Programmatic image overlays.