Cloudflare Workers Add Inbound TCP Sockets, Bringing gRPC Support to the Serverless Platform
Cloudflare Workers can now accept inbound TCP connections and serve gRPC for the first time since the platform's 2017 launch, in private beta.
Signal
23 articles covering "cloudflare"
Cloudflare Workers can now accept inbound TCP connections and serve gRPC for the first time since the platform's 2017 launch, in private beta.
Researchers showed AI coding and security agents can be hijacked through poisoned Cloudflare, Datadog, and Sentry logs to rewrite DNS records and steal credentials.
Cloudflare opens a private beta of WriteGuard, a policy and audit layer that classifies and can block risky write actions AI agents take through MCP servers.
Cloudflare open-sourced @cloudflare/ci, a CI/CD SDK that replaces YAML pipelines with TypeScript running on Cloudflare Workflows.
Node.js and Deno creator Ryan Dahl has open-sourced celld, letting developers run Cloudflare's Durable Objects and Workers APIs on their own S3-backed infrastructure.
Cloudflare's new Kitesurf browser skips Chromium entirely, running in V8 isolates on Workers to cut CPU and memory use for AI agent tasks.
Cloudflare detailed the custom infrastructure behind its Workers AI expansion to host models like Kimi K2.5, including a Rust-based inference engine and a lossless weight-compression system.
Cloudflare's Gen 13 platform pairs AMD EPYC 9965 chips with FL2, a Rust rewrite of its NGINX-based proxy, doubling edge throughput while trading L3 cache for cores.
Cloudflare has released EmDash v0.1, a full-stack serverless CMS written in TypeScript atop the Astro framework it acquired in January, promising sandboxed plugin isolation, AI-native management via MCP, and MIT licensing as a direct challenge to the 42.5 percent of the web still running WordPress.
Cloudflare's new isolate-based runtime starts AI agent sandboxes in milliseconds with megabytes of memory, replacing containers and pairing with Code Mode to cut LLM token usage by 81 percent.
Cloudflare's 2026 Threat Report documents a pivotal shift: attackers now log in rather than break in, using stolen session tokens and AI-assisted credential theft to bypass MFA, as DDoS volumes doubled and nation-state pre-positioning inside critical infrastructure intensifies.