Cloudflare roadmap

Switching nameservers tells the internet where to look for your domain details. When you buy a domain, it usually uses your registrar's default servers. By updating these to Cloudflare nameservers, you hand over DNS management.

Imagine moving house and giving the post office your new forwarding address so your mail arrives safely at the right place. This step is vital because it lets Cloudflare handle your web traffic and protect your site.

Doing this correctly unlocks all of Cloudflare's speed and security features for your web projects.

• Nameservers point traffic to your DNS provider
• Update them at your domain registrar
• Changes can take up to twenty four hours
• Enables all Cloudflare tools for your site

DNS records are instructions that tell browsers how to reach your website. An A record points your domain to an IP address, while a CNAME points a name to another domain. TXT records verify ownership or add security rules.

Think of these records like entries in a digital phone book, connecting your friendly website address to the actual computer server hosting your files. Managing them properly ensures visitors land on your pages instead of a broken error screen.

Getting this right forms the bedrock of your web hosting setup.

• A records link domains to server IP addresses
• CNAME records point subdomains to other domains
• TXT records store domain verification data
• Incorrect records will break your website access

The proxy status is represented by a small cloud icon next to your DNS records. When the cloud is orange, traffic routes through Cloudflare first, hiding your real server IP and enabling security features. A grey cloud means direct traffic.

Consider it like routing your home mail through a secure sorting office rather than letting strangers drop parcels straight on your doorstep. This matters because it shields your server from direct attacks and distributed denial of service attempts.

Keeping the proxy enabled is the easiest way to tap into immediate performance boosts.

• Orange cloud routes traffic through Cloudflare
• Hides your origin server IP address
• Grey cloud bypasses the proxy completely
• Essential for security and speed features

Email routing lets you create custom email addresses using your domain name and forward those messages to any personal inbox. Instead of paying for a separate business email mailbox, Cloudflare handles the redirection safely.

Imagine setting up a mail redirection service where letters sent to hello at your business dot com automatically land in your personal email account. This helps small business owners look professional without extra software costs.

It keeps your main inbox organised while maintaining custom branding for your web projects.

• Creates custom email addresses for free
• Forwards incoming mail to personal inboxes
• Requires correct MX records setup
• Saves money on business email hosting

A content delivery network places copies of your static website files on servers located all over the world. When a visitor requests your site, Cloudflare serves these files from the data centre closest to them.

Picture a franchise restaurant keeping popular ingredients at local branches rather than shipping every single burger from the main headquarters every time. This matters because shorter physical distance means faster loading times and happier users.

Faster sites improve user experience and help your pages rank better in search engine results.

• Caches static files on global servers
• Reduces physical distance for data travel
• Lowers load times for international visitors
• Decreases bandwidth usage on your origin server

Cache rules give you precise control over which files Cloudflare saves and how long it keeps them. You can tell it to store images and stylesheets aggressively while bypassing the cache for dynamic shopping cart pages.

Think of it like deciding which items go into the front display window of a shop and which stay stored safely in the back room inventory. This ensures fast delivery of design assets without serving stale data to logged-in users.

Proper rules balance speed with website functionality.

• Specify files for caching based on paths
• Set custom expiration times for saved assets
• Bypass cache for dynamic user pages
• Improves overall server response efficiency

Purging the cache tells Cloudflare to delete its saved copies of your website files immediately. When you update a logo or fix a typo, purging ensures users stop seeing the old version.

Imagine clearing out old promotional posters from shop windows so you can put up your brand new sale announcements. This matters because outdated files can confuse visitors or break newly updated website features.

It is a handy tool to use whenever you deploy major site updates.

• Deletes saved copies from edge servers instantly
• Can purge individual files or everything at once
• Ensures visitors see your latest updates
• Useful during active website development

Auto minify automatically strips out unnecessary spaces, line breaks, and comments from your HTML, CSS, and JavaScript files. The computer reading the code does not need these human-friendly formatting quirks.

Think of packing clothes tightly into a travel bag by removing bulky cardboard boxes to save precious space. This speeds up downloads because smaller files travel across the internet much quicker.

It is an effortless way to squeeze extra performance out of your existing web code.

• Removes whitespace and comments from code
• Reduces file sizes for faster downloading
• Applies to HTML, CSS, and JavaScript files
• Does not alter how your website functions

SSL and TLS modes decide how data is encrypted between your visitors, Cloudflare, and your web server. Modes range from flexible, which encrypts only the visitor side, to full strict, which encrypts the entire journey using valid certificates.

Consider it like sealing mail in an envelope for part of the trip versus using a locked armored van for the entire delivery route. This matters to protect sensitive user passwords and personal details from eavesdroppers.

Choosing the right mode builds crucial trust with your website visitors.

• Encrypts traffic between browsers and servers
• Flexible mode only encrypts visitor to Cloudflare
• Full strict mode requires a certificate on your server
• Prevents data interception and privacy leaks

A web application firewall inspects incoming web traffic and blocks malicious requests before they ever reach your server. You can write custom rules to block specific countries, known bad user agents, or suspicious payload patterns.

Think of this as a trained security guard standing at a club entrance, checking IDs and stopping troublemakers from getting inside. This is essential for preventing automated hacking tools and SQL injection attacks.

It keeps your web applications safe from common online threats.

• Inspects incoming web traffic for malicious intent
• Blocks common attacks like SQL injection
• Allows custom rules based on visitor traits
• Protects server resources from automated abuse

Managed challenges present suspicious website visitors with interactive browser checks instead of blocking them outright. If a visitor is human, they pass the test smoothly; if they are a malicious bot, they are stopped.

Picture a security guard asking an unfamiliar visitor a simple verification question before letting them wander into a building. This matters because aggressive security settings can sometimes accidentally lock out real customers.

It balances tight security with a smooth experience for genuine human users.

• Tests visitors to verify if they are human
• Avoids blocking legitimate users aggressively
• Stops automated scripts and web scrapers
• Customisable sensitivity levels for your traffic

Page shield monitors the third-party JavaScript scripts running inside your visitors' browsers. Many sites load widgets and analytics from outside vendors, which can sometimes be hijacked by malicious actors.

Imagine checking the identification badges of external contractors working inside your office building to ensure no one tampers with equipment. This helps catch data skimming malware early.

It protects your users from supply chain attacks originating from third-party code.

• Monitors third-party browser scripts for changes
• Detects client-side malware and data theft
• Alerts you to unauthorized script modifications
• Protects user data entered into your forms

Cloudflare Pages is a hosting platform designed for static websites and frontend web applications. By linking your Git repository, Cloudflare builds and deploys your site globally whenever you push code changes.

Think of it as an automated printing press that instantly publishes your newest book chapters the second you finish writing them. This matters because it removes the hassle of manual file uploads and server configuration.

It offers fast, reliable hosting with generous free tier allowances.

• Hosts static sites and frontend apps directly
• Connects with Git repositories for auto builds
• Deploys updates across global edge servers
• Includes free SSL and custom domain support

Cloudflare Workers let you run serverless JavaScript code directly on Cloudflare edge servers. Instead of renting a traditional virtual private server, your code runs close to your users worldwide.

Consider it like having mini helper stations in cities around the globe ready to process user requests instantly. This is useful for personalising web content, redirecting traffic, or handling API requests without managing hardware.

It provides scalable computing power with zero server maintenance overhead.

• Runs JavaScript code on edge servers
• Eliminates traditional server hardware setup
• Executes close to your website visitors
• Handles routing, headers, and API responses

Custom domains let you attach your own professional web address to your Pages projects or Worker scripts. Instead of using default provider subdomains, your app runs on your exact brand identity.

Think of replacing a temporary construction site address with your permanent high street shop sign. This matters for branding and ensures your visitors trust the web application they are using.

Cloudflare automates DNS configuration and SSL certificates for these attached domains.

• Attaches custom domains to serverless apps
• Replaces default provider URLs with your brand
• Automates DNS record creation and SSL setup
• Essential for professional web applications

Workers KV is a global key-value data storage system designed to work alongside your Cloudflare worker scripts. It stores simple pieces of data and replicates them across the edge network for fast lookups.

Imagine a tiny address book kept in every branch office so staff can look up customer preferences in milliseconds. This is ideal for storing configuration settings, user redirects, or feature flags.

It allows serverless scripts to remember information without needing a heavy database.

• Global key-value data storage for workers
• Replicates data across edge data centres
• Optimised for fast read performance
• Great for configs, tokens, and simple lookups

R2 object storage allows you to store large files like images, videos, and backups without paying any egress fees. Traditional cloud storage charges you every time someone downloads data, but R2 removes those download costs.

Picture a warehouse where you pay only for shelf space, with no extra charges when customers take items away. This matters for developers hosting heavy media libraries on a budget.

It integrates smoothly with worker scripts for building custom file management apps.

• Stores large files and media assets
• Zero egress fees for downloading data
• Compatible with standard S3 API tools
• Integrates easily with Cloudflare Workers

Zero trust access protects your internal tools and admin dashboards by requiring users to log in before they can view them. Instead of relying on a traditional VPN, access rules check user identities at the edge.

Think of needing a secure staff pass and biometric scan just to open a sensitive back office door. This is vital for keeping internal company applications safe from unauthorised internet scanners.

It secures your infrastructure without complicating things for authorised team members.

• Protects internal apps behind login screens
• Replaces clunky traditional VPN setups
• Verifies user identity before granting access
• Integrates with common identity providers

Cloudflare tunnels connect your home server or office network securely to Cloudflare without opening dangerous inbound firewall ports. A small daemon runs on your local machine and creates an outbound-only connection.

Imagine having a secure private tube running from your house to a sorting office, letting guests visit without unlocking your front door. This lets you self-host applications safely behind Cloudflare protection.

It keeps your home or office network hidden from malicious port scanners.

• Connects local networks securely to Cloudflare
• Requires no inbound firewall port forwarding
• Uses an outbound daemon for connectivity
• Ideal for safely self-hosting web services

D1 is a serverless SQL database built on SQLite that runs at the edge alongside your Cloudflare workers. It lets you query relational data globally without managing complex database server clusters.

Think of having a compact filing cabinet next to every local branch office, keeping your records organised and close at hand. This matters for building full-stack web apps that need to store user accounts and structured data.

It brings relational database power into the serverless ecosystem.

• Serverless SQLite database at the edge
• Runs alongside Cloudflare worker scripts
• Supports standard SQL queries and relations
• Removes database server management overhead