Notes

Cyber Bodhisattva: Detailed Services Available in Cloudflare Free Accounts

2026-06-08 #Cloudflare

Cloudflare Free Tier Service Overview: From DNS/CDN to Workers Full-Stack Edge Platform

Intended Audience: Individual developers, indie products, open-source projects, small-to-medium team PoCs, low-cost global expansion/access scenarios

Important Reminder: Free quotas, regional availability, terms of service, and abuse restrictions are subject to change. This article is compiled based on public pages. Please refer to the official pricing/limits pages of Cloudflare and its competitors before launching in production.


Summary in One Sentence

Cloudflare's Free tier is no longer just a "free CDN." It is more like an entry-level internet application platform covering DNS, TLS, basic DDoS/CDN/WAF, static hosting, edge functions, object storage, Serverless databases, queues, form/bot protection, web analytics, email routing, Zero Trust access, tunnels, and some AI capabilities.

Compared with competitors like Vercel, Netlify, AWS, Fastly, Tailscale, ngrok, reCAPTCHA, and hCaptcha, the greatest advantage of Cloudflare Free is: the coverage of free services is extremely wide, with many capabilities natively integrated into the same edge network and dashboard. Its weaknesses are also clear: there are no commercial-grade SLAs or support guarantees on the Free tier, some limits are hard constraints, the experience with complex frameworks may not be as smooth as Vercel/Netlify, and heavy computation/database/media-heavy scenarios will quickly hit limits or require paid upgrades.


1. What's Available in Cloudflare Free Tier?

Organized by use case below. It is recommended to double-check official documentation for specific limits before going live.

1.1 Website Infrastructure: DNS, TLS, CDN, DDoS

Service Free Tier Capabilities Best Fit Scenarios Key Considerations
DNS Authoritative DNS, API, DDoS resilience, common DNS management capabilities Domain resolution, global routing optimization, bringing domains into Cloudflare Advanced traffic routing, enterprise DNS features may require payment
SSL/TLS Free TLS certificates, automatic issuance and renewal Enabling HTTPS for websites Complex certificates, custom certificate management, advanced certificate features may need to be purchased separately
CDN / Cache Proxy and cache static content through Cloudflare, reducing origin server load Blogs, official websites, documentation, static assets Dynamic content caching, image/video optimization, Argo, load balancing, etc. are advanced or paid features
Basic DDoS Protection Free plans also include basic security and performance protections Personal sites, small team sites, open-source projects Enterprise DDoS SLAs, Bot Management, and advanced security policies require higher-tier plans

Evaluation: If you just want to put a website behind a global network, the barrier to entry for Cloudflare Free is very low: change DNS, enable proxy, turn on HTTPS, and you get basic acceleration and security benefits. This is the most competitive entry-point capability of Cloudflare's free tier.


Cloudflare WAF documentation shows that the security capabilities available under the Free plan include, but are not limited to:

  • Custom WAF rules;
  • 1 Rate Limiting rule;
  • Free Managed Ruleset;
  • Email Obfuscation;
  • Hotlink Protection;
  • IP Access Rules;
  • User Agent Blocking;
  • Zone Lockdown;
  • Security Analytics;
  • Sampled Security Events logs.

Best Fit Scenarios:

  • Protecting personal websites from scrapers and hotlinking;
  • Implementing basic rate limiting for small APIs;
  • Basic WAF for WordPress, documentation sites, and marketing sites;
  • Building a security baseline before you have the budget to acquire a dedicated WAF.

Key Considerations: The free tier is "good enough basic protection," not a full enterprise-grade Web security platform. Bot Management, more advanced managed rules, more rate limits, advanced logging, and security analytics typically require upgrades.


1.3 Frontend Hosting: Cloudflare Pages

Cloudflare Pages is an extremely notable service in the free tier, suitable for static sites, Jamstack, documentation sites, landing pages, frontend applications, and lightweight full-stack projects.

Item Free Tier Quota / Capability
Number of Sites Official pages show all plans support unlimited sites
Seats / Team Members Official pages show all plans support unlimited seats
Requests & Bandwidth Official pages show all Pages plans support unlimited requests / bandwidth
Build Volume Free: 500 builds / month
Concurrent Builds Free: 1 concurrent build
Custom Domains Free: 100 custom domains per project
File Limit Free: 20,000 files per site
Single Static Asset 25 MiB; larger files are recommended to be placed in R2
Pages Functions Billed/metered as Workers; Free tier usage counts toward Workers Free quotas
Static Asset Requests Workers/Pages static asset requests are free and unlimited

Best Fit Scenarios:

  • Personal blogs, knowledge bases, and open-source documentation;
  • Company homepages and product landing pages;
  • Statically built projects like React/Vue/Svelte/Astro/Hugo;
  • Frontend projects with lightweight APIs, such as form submissions, webhooks, or OAuth login callbacks.

Differences from Vercel / Netlify:

  • Cloudflare Pages is extremely generous with its free static requests and bandwidth allocations, making it ideal for static sites with fluctuating traffic;
  • Vercel generally offers a superior development experience for Next.js, particularly with native Next.js features, preview deployments, and ecosystem integration;
  • Netlify's forms, deployment workflows, and plugin ecosystem are very mature, but its free tier relies on a credits consumption model, so you need to keep an eye on credit usage.

1.4 Edge Functions: Cloudflare Workers

Workers is the core of Cloudflare's developer platform. The Free tier currently includes:

Metric Typical Free Tier Quotas
Requests 100,000 requests / day
CPU Time 10 ms CPU / invocation
Max CPU per Invocation Documentation details default/max CPU limits; the Free tier is designed primarily for short CPU tasks
Cron / Queue Consumer Subject to execution duration limits per run
Static Asset Requests Free and unlimited
Workers Logs Free: ~200,000 log events / day, retained for 3 days

Best Fit Scenarios:

  • API gateways, lightweight interfaces, and webhooks;
  • A/B testing, redirects, authentication, and HTTP header rewrites;
  • Minimal dynamic logic alongside static sites;
  • Proxying third-party APIs, caching, and edge-level security verification;
  • Combining with KV, D1, R2, Queues, and Durable Objects to build lightweight backends.

Not Suitable For:

  • Long CPU execution/computation;
  • Migrating large monolithic backends;
  • Heavy tasks, heavy database transactions, and complex background jobs;
  • Projects that require comprehensive compatibility with the Node.js runtime.

1.5 Data & Storage: KV, D1, R2, Durable Objects, Queues, Hyperdrive

Cloudflare's Free tier is already sufficient to build a small full-stack application.

Service Core Free Tier Quota / Capability Typical Use Case
Workers KV 100,000 reads/day, 1,000 writes/day, 1,000 deletes/day, 1,000 list/day, 1 GB storage Configuration, caching, Feature Flags, low-frequency write data
D1 5M rows read/day, 100k rows written/day, 5 GB storage Small SQLite Serverless database, prototyping, light business data
R2 10 GB-month/month, 1M Class A ops/month, 10M Class B ops/month, no egress traffic fees Object storage, images/attachments, static large files, backups
Durable Objects SQLite-backed Durable Objects available for Free; requests, duration, SQL R/W, and storage have free quotas Collaborative state, chat rooms, locks, sessions, counters
Queues Free: 10,000 operations/day, 24h retention Asynchronous tasks, rate limiting/smoothing, event processing
Hyperdrive Free: 100,000 database queries/day Optimizing connection and queries to external databases from Workers

Architectural Recommendations:

  • KV is for read-heavy and write-light data; do not use it as a strongly consistent database;
  • D1 is suitable for small relational data and prototyping, but indices and write frequencies must be carefully designed;
  • R2 is a crucial alternative to S3 in Cloudflare's free tier, especially the "zero egress fees" which are highly attractive for download-heavy scenarios;
  • Queues are ideal for decoupling user requests from background processing;
  • Durable Objects are suitable for real-time/collaborative scenarios requiring state aggregation per object, but you must understand its programming model;
  • Hyperdrive is helpful when you already have external databases like Postgres/MySQL and want to access them more efficiently from Workers.

1.6 Bot Protection & Privacy-first Analytics: Turnstile, Web Analytics, Zaraz

Service Free Tier Capability Competitors
Turnstile Free: Max 20 widgets, all widget types, unlimited challenges, 10 hostnames per widget Google reCAPTCHA, hCaptcha
Web Analytics Free, privacy-first, does not rely on cookies/localStorage/client-side state, no fingerprinting Google Analytics, Plausible, Fathom
Zaraz Available to all Cloudflare users; 1,000,000 free Zaraz Events per account/month Google Tag Manager, Segment, Tealium

Evaluation:

  • Turnstile is ideal for replacing traditional CAPTCHAs, reducing user friction;
  • Web Analytics is perfect for sites that only require lightweight metrics like PVs, visitors, referrers, and page paths;
  • Zaraz is great for shifting third-party scripts to the edge, reducing frontend performance overhead.

1.7 Email Forwarding: Email Routing

Email Routing is a free custom-domain email forwarding service that forwards addresses like [email protected] or [email protected] to your existing inbox. Cloudflare officially states that it does not store or access email content, and it provides configuration tools related to DNS records.

Best Fit Scenarios:

  • Personal custom domain email forwarding;
  • Contact emails for open-source projects / small products;
  • When you don't want to purchase a full business email plan but want your domain email to look professional.

Key Considerations: It is primarily for forwarding, not full email hosting. Sending emails, team inboxes, archiving, and compliance features still require services like Gmail/Google Workspace, Microsoft 365, Fastmail, or Zoho Mail.


1.8 Zero Trust, Access, and Tunnel

The Cloudflare Zero Trust Free tier is suitable for small teams and PoCs. The official page labels the Free Plan as $0 forever, suitable for teams with up to 50 users or enterprise PoCs. Cloudflare Access can protect access to self-hosted, SaaS, and non-Web applications, reducing reliance on traditional VPNs. Cloudflare Tunnel uses outbound connections to link your origin server to Cloudflare, avoiding the need to expose inbound public ports.

Service Free Tier Value Competitors
Cloudflare Access Protects internal applications, admin panels, staging environments Tailscale, Teleport, Okta, Google BeyondCorp style solutions
Cloudflare Tunnel Secures intranet services to Cloudflare without exposing public IPs/ports ngrok, Tailscale Funnel, frp, localtunnel

Best Fit Scenarios:

  • Protecting /admin, Grafana, internal tools, and staging environments;
  • Securing and exposing home labs, NAS devices, or intranet services;
  • Replacing basic VPNs or bastion hosts;
  • Temporarily demonstrating local services.

1.9 AI Features: Workers AI, AI Gateway, AI Search, Browser Run, Workflows

Cloudflare's free tier has also begun to cover AI and automation-related capabilities.

Service Free Tier Capability Best Fit Scenarios
Workers AI 10,000 Neurons/day allocated for free; overages require Workers Paid Small model inference, embeddings, prototyping
AI Gateway Core features available to all plans; Workers Free has logging limits Multi-model gateway, caching, rate limiting, observability
AI Search Free within limits during open beta; limits on instances, files, queries, and crawled pages Docs search, site search, RAG prototyping
Browser Run Free: 10 minutes/day, 3 concurrent browsers Browser automation, screenshots, web scraping prototyping
Workflows Available on Free, quotas tied to Workers Free, with storage limits Multi-step tasks, state machines, asynchronous orchestration

Key Considerations: AI Search is still in beta and changing rapidly. AI inference, model selection, log retention, data compliance, and vendor lock-in/costs need to be evaluated separately.


1.10 Free Tier Doesn't Mean All Cloudflare Services Are Free

The following capabilities should typically not be planned as "free core capabilities":

  • Argo Smart Routing;
  • Load Balancing;
  • Advanced Certificates;
  • Media products like Images and Stream;
  • APO for WordPress;
  • Advanced Bot Management;
  • Enterprise-grade logging, SLAs, and support;
  • Containers: Official pricing pages show Containers are billed under Workers Paid; Free does not provide CPU/memory/disk quotas;
  • Vectorize: Cloudflare documentation pages mention "only available on Workers Paid," while tables also list some Free rows. It is recommended to verify this before launch and not rely on it as a stable free dependency.

2. How Does It Compare Against Competitors?

2.1 Cloudflare Pages vs. Vercel Hobby vs. Netlify Free

Dimension Cloudflare Pages Free Vercel Hobby Netlify Free
Core Positioning Static site + edge functions + global network Personal projects, small apps, superior Next.js experience Jamstack hosting, deployment workflows, plugin ecosystem
Commercial Use Subject to Cloudflare's terms for specific usage Official terms explicitly state Hobby is for non-commercial personal projects Free can be used for getting started, but limited by credits
Static Traffic Pages official pages show unlimited requests / bandwidth Subject to edge request limits Centered on credits consumption
Build Quotas 500 builds/month, 1 concurrent build Limits on projects, resources, functions, etc. 300 credits/month; production builds consume credits
Functions Pages Functions count toward Workers Free: 100k requests/day 1M function invocations/month under Hobby limits Functions/compute consume credits
Framework Exp Strong as a general static and edge platform Next.js native experience is generally best Mature Jamstack workflows

Selection Advice:

  • If you want low-cost static sites, documentation sites, global access, and a more generous free bandwidth policy: prioritize Cloudflare Pages;
  • If you want the latest Next.js features, preview deployments, and the Vercel ecosystem: prioritize Vercel;
  • If you want Netlify Forms, plugins, and a mature Jamstack workflow: prioritize Netlify.

2.2 Cloudflare Workers vs. AWS Lambda

Dimension Cloudflare Workers Free AWS Lambda Free Tier
Free Requests 100,000 requests/day 1M requests/month
Free Compute 10ms CPU/invocation, designed for light edge tasks 400,000 GB-seconds/month, general-purpose function model
Deployment Cloudflare global edge network AWS region + option to bundle with CloudFront/API Gateway
Runtime Model Web standards, edge runtime, excellent cold-start performance Rich language/runtime support, full AWS ecosystem
Cost Structure Integrated with Cloudflare data/edge services Additional costs for API Gateway, CloudFront, S3, WAF, logging, etc.

Selection Advice:

  • For API gateways, light business logic, edge rewrites, and low-latency global endpoints: Workers is a great fit;
  • For Python/Java/.NET, longer running tasks, and complex AWS resource integrations: Lambda is more suitable;
  • For large-scale production systems: costs should be calculated individually based on real requests, CPU time, logs, databases, and egress traffic.

2.3 Cloudflare R2 vs. AWS S3 / CloudFront

Cloudflare R2's free tier includes object storage capacity and operation quotas, with its key selling point being zero egress fees. AWS S3/CloudFront is the most signature ecosystem combination: CloudFront has ongoing free traffic/request allocations, while S3 and AWS Free Tier rules change depending on account age, credits, regions, and service policies.

Dimension Cloudflare R2 Free AWS S3 + CloudFront
Object Storage 10 GB/month free AWS Free Tier/credits/regional rules depend on the account
Egress Traffic R2 officially highlights zero egress traffic fees CloudFront has a monthly free quota; excess is billed by region/request
Ecosystem Very smooth integration with Workers and Pages AWS SDK, IAM, and enterprise ecosystem are most mature
Best Fit Download sites, images/attachments, edge app storage Enterprise cloud architecture, complex permissions, data lakes, compliance

Selection Advice:

  • For personal products, large file downloads, and static asset distribution: R2's free tier is highly attractive;
  • For enterprise-grade object storage governance, cross-AWS integrations, and complex IAM: S3 remains the de facto standard.

2.4 Cloudflare CDN/WAF vs. AWS CloudFront/WAF, Fastly

Dimension Cloudflare Free AWS CloudFront/WAF Fastly
CDN Entry Cost Free DNS/CDN/TLS/basic security CloudFront has a monthly free quota Free tier available, excess is pay-as-you-go
WAF Free tier includes basic WAF and rule capabilities AWS WAF is billed per Web ACL, rule, and request Advanced edge capabilities, mostly paid
Ease of Use Unified dashboard, simple DNS integration Complex AWS ecosystem but powerful High engineering capability, suitable for demanding CDN
Best Fit Low-cost integrated protection Native AWS architecture High performance, programmable edge, enterprise CDN

Selection Advice:

  • If your budget is zero and you want DNS+TLS+CDN+basic WAF all-in-one: Cloudflare;
  • If you are deeply integrated into AWS: CloudFront + AWS WAF;
  • If you have professional CDN tuning / edge computing needs: Fastly.

2.5 Cloudflare Access/Tunnel vs. Tailscale vs. ngrok

Dimension Cloudflare Access/Tunnel Tailscale Free ngrok Free
Main Purpose Protect internal apps, expose services via Tunnel and hide origin Personal/small team Mesh VPN Temporary public access for local development
Free Tier Zero Trust Free fits up to 50 users/PoC; Tunnel is free to create Personal plan is free, max 6 users, generous device limits 3 online endpoints, 1GB data transfer out, 20k HTTP requests/month, 3 agents
Access Model Based on Cloudflare edge, identity policies, app access Device-to-device private network Public tunnel / developer gateway
Best Fit Internal Web apps, admin panels, Zero Trust access Personal devices, home labs, private network interconnects Demos, local webhooks, temporary tests

Selection Advice:

  • To expose an internal Web app under a domain with authentication: Cloudflare Access + Tunnel;
  • To access all your devices like a VPN: Tailscale;
  • To quickly give a local service a public URL for a demo: ngrok.

2.6 Turnstile vs. reCAPTCHA vs. hCaptcha

Dimension Cloudflare Turnstile Free Google reCAPTCHA Essentials hCaptcha Basic
Free Quotas 20 widgets, unlimited challenges Free 10,000 assessments/month; excess errors if billing is not enabled Free up to 100,000 requests/month
UX Emphasizes non-intrusive / low-friction verification Wide ecosystem, strong Google risk control Independent CAPTCHA service, good compatibility
Best Fit Forms, registration/abuse prevention, login protection Already on Google Cloud/needs reCAPTCHA risk control Needs a CAPTCHA alternative

Selection Advice:

  • For personal sites, small products, and reducing CAPTCHA interruption: Turnstile is preferred;
  • If already in the Google risk control system: reCAPTCHA;
  • If you want a reCAPTCHA alternative with appropriate quota limits: hCaptcha.

3. 8 Types of Projects Most Suited for Cloudflare Free

  1. Personal Blogs / Docs / Open-Source Project Sites
    Pages + DNS + SSL + Web Analytics is basically all you need.

  2. Static Marketing Sites / Landing Pages
    Pages + CDN + Turnstile + Email Routing gets you up and running quickly.

  3. Small API / Webhook Gateways
    Workers + KV/D1 + WAF + Rate Limiting is ideal for low-cost operations.

  4. Lightweight Full-Stack App Prototypes
    Pages frontend, Workers API, D1 database, R2 file storage, and Queues for async tasks.

  5. Download Sites / Attachment Storage
    R2's free capacity and zero egress fees are highly valuable, but pay attention to operation limits and abuse policies.

  6. Internal Tools / Admin Panels
    Cloudflare Access + Tunnel minimizes the risk of exposing your origin servers publicly.

  7. Anti-Spam Forms / Registration Protection
    Turnstile replaces traditional CAPTCHAs, yielding a lighter user experience.

  8. AI App Prototypes
    Workers AI + AI Gateway + AI Search beta for lightweight RAG, model proxying, observability, and caching.


4. Recommendations for Using the Free Tier

4.1 Prioritize "Static First, Edge for Dynamics" in Architecture

Cloudflare Free is best suited for static content and light edge logic. Build static pages whenever possible, cache data as much as you can, and keep dynamic APIs short and concise.

4.2 Put Large Files in R2, Not in Pages Build Outputs

Pages has size limits on single static assets. It is recommended to put larger images, attachments, or download packages in R2 and distribute them via Workers or custom domains.

4.3 Clearly Separate KV, D1, and Durable Objects

  • KV: read-heavy/write-light, eventual consistency, configurations/caching;
  • D1: relational data, small business tables;
  • Durable Objects: state aggregation per object, collaboration, locking, sessions;
  • Queues: asynchronous tasks and rate smoothing/limiting;
  • R2: objects/files.

4.4 Calculate Quotas Before Production

Estimate at least:

  • Daily Workers requests;
  • CPU time per request;
  • D1 row reads/writes;
  • KV read/write counts;
  • R2 Class A / Class B operations;
  • Pages build volumes;
  • Turnstile widget counts;
  • Web Analytics/Zaraz event volumes;
  • Zero Trust user counts.

4.5 Have a "Graceful Degradation" Policy for the Free Tier

Once free limits are reached, the typical result is not automatic scaling, but errors, suspension, waiting for the next cycle, or requiring upgrades. Recommendations:

  • Set up alerts for Workers;
  • Rate limit write operations;
  • Sample logs;
  • Heavily cache high-traffic static content;
  • Have a paid upgrade plan ready;
  • Do not rely solely on the free tier for critical business operations.

5. Summary: The True Positioning of Cloudflare Free

The value of Cloudflare's Free tier lies in giving developers access to a baseline of modern internet application capabilities at virtually zero cost:

  • Domain resolution;
  • HTTPS;
  • CDN;
  • DDoS and basic WAF;
  • Static hosting;
  • Edge functions;
  • Serverless databases and object storage;
  • Queues and stateful objects;
  • Bot protection;
  • Privacy-friendly analytics;
  • Email routing;
  • Zero Trust access;
  • AI prototyping capabilities.

If your goal is personal projects, open-source projects, small commercial validations, low-cost global deployments, or rapid PoCs, Cloudflare Free is one of the top platforms to evaluate first.

If your goal is commercial SLAs, full support, complex backends, heavy computing, large-scale databases, heavy media processing, complex compliance, security audits, or enterprise procurement, the Cloudflare Free tier should only serve as an entry point. You will eventually need to upgrade to a paid plan or select a more suitable cloud service combination.


Cloudflare Official Resources

Competitor Resources

Comments
Share

Comments