Tag: cloudflare

A security audit of Garrul, my Cloudflare Workers comment system, found 2 critical bugs. Both had the same root cause as one I had already fixed in June.

A WordPress login bot burned 90% of my Cloudflare Workers free tier in two hours attacking a site that has never run PHP. Here's what actually stopped it.

Cloudflare Durable Objects solve the one thing serverless can't: coordination. Storage API, WebSocket hibernation, gotchas, and a working rate limiter build.

Claude Code and other AI coding agents need somewhere to run. Compare laptop, Docker, throwaway VMs, and Cloudflare Workers on blast radius, cost, and setup.

I looked at a lot of self-hosted comment systems. None of the ones I wanted ran on Cloudflare Workers. So I wrote one. Here's the story and the deploy.

Akismet's licensing terms are increasingly hostile to small sites. Here are 11 spam-protection options, hosted APIs, CAPTCHA widgets, and DIY honeypots, that actually work in 2026.

Real cloudflared config: many services on one tunnel, Access policies, origin TLS, what quick tunnels are for, and what Cloudflare can see in your traffic.

Cloudflare Workers run your JS at the edge, no servers, no cold starts, 100k free req/day. Here's what they're actually good for.

Cloudflare's free tier WAF is more powerful than most people use. Here's how to actually configure it: rules, rate limits, and all.

Stop using your registrar's janky DNS panel. Here's how Cloudflare DNS actually works, proxying, DNSSEC, dynamic DNS, and email records that don't break.

Cloudflare Tunnels expose local services to the internet without open ports, secure setup with zero-trust access controls.