Reference · Diagram Design

Cloudflare Product Reference

Twelve product categories grouped under four functional layers — foundation, build, AI, and protect & deliver.

Cloudflare product reference, grouped by category A structural reference diagram grouping Cloudflare's products into twelve categories nested under four functional layers. Foundation holds Domain & DNS and Frontend Hosting. Build holds Compute, Data & Storage, Orchestration, and Platform Controls. AI holds Inference and Retrieval & RAG. Protect & Deliver holds Performance & Edge, Application & Network Security, Zero Trust / SASE, and Media. FOUNDATION Domain & DNS · Registrar — buy & manage the domain name · DNS — point your domain to the right servers · SSL / TLS — encrypt traffic automatically (https) · DNSSEC — stop DNS spoofing / hijacking Frontend Hosting · Pages — static sites & Jamstack, deployed from Git · Workers + Static Assets — static hosting + server code, one project BUILD Compute · Workers — serverless code at the edge · Durable Objects — stateful coordination · Containers — full apps, any runtime · Browser Run — headless Chrome on demand Data & Storage · R2 — object storage, S3-compatible · D1 — SQL database, relational data · KV — key-value store, fast reads · Hyperdrive — speeds up existing Postgres Orchestration · Queues — hand work off to run later · Workflows — durable multi-step runs · Pipelines — streaming ingestion into R2 Platform Controls · Workers VPC — reach private infra · Flagship — feature flags & rollouts · Secrets Store — managed secrets AI Inference · Workers AI — run LLMs, embeddings & vision models, no GPU ops · AI Gateway — one proxy for caching, limits, logging & fallbacks Retrieval & RAG · Vectorize — vector database, semantic similarity search · AI Search — managed RAG end to end (formerly AutoRAG) PROTECT & DELIVER Performance & Edge · CDN — caches content near users · Load Balancing — spreads traffic · Caching — skips origin on repeat hits · Image Optimization — auto resize App & Network Security · WAF — blocks SQLi / XSS patterns · DDoS Protection — absorbs floods · Bot Management — blocks bots · API Security — validates APIs · Rate Limiting — caps requests · Email Security — filters phishing Zero Trust / SASE · Access — app login, no VPN needed · Gateway — filters outbound traffic · Tunnel — connects private networks · Browser Isolation — remote browsing Media · Stream — host video, no player build · Images — store, resize & deliver MOST-USED ENTRY POINT