Cover of Cloudflare Made Crystal Clear
← Back to the series

Cloudflare

Made Crystal Clear

A practical, visual guide to DNS, caching, security, Zero Trust tunnels, and building on Workers with Cloudflare

Cloudflare says it powers one in five websites, yet most people meet it through a redirect loop, a 522 error, or a "how is this free?" thread. This visual guide follows one request from browser to server and shows you what happens at every step. Move your domain safely, get HTTPS right, cache without leaking, block bad traffic on the free plan, publish home apps with Tunnel and a real login, then build and price apps on Workers.

Pages
289
Level
Beginner to advanced
Status
Available
Soon on AmazonGive feedback

Inside the book

  1. 01Why Cloudflare: The Problem and the Network
  2. 02How Cloudflare Works: The Request Path
  3. 03Getting Started: Put Your Domain on Cloudflare
  4. 04SSL/TLS Without Redirect Loops
  5. 05Caching and Speed
  6. 06Rules: Redirects, Rewrites, and the Rules Language
  7. 07Security: WAF, Rate Limiting, DDoS, Bots, and Turnstile
  8. 08Cloudflare Tunnel: Self-Host Without Opening Ports
  9. 09Zero Trust Access: Put a Login in Front of Everything
  10. 10Troubleshooting: 52x, 1033, Too Many Redirects, and Friends
  11. 11The Developer Platform and Your First Worker
  12. 12Storage and State: R2, KV, D1, Durable Objects, and Workers AI
  13. 13Pricing, the Free Tier, and the Business Case
  14. 14Production and Best Practices
  15. 15Learning Path, Cheat Sheet, and Resources

You'll leave with

  • Move a domain without breaking email
  • Set Full (strict) SSL and end redirect loops
  • Cache safely and read cf-cache-status

For teams

Put Cloudflare on every desk at your company.

One licence, every book in the series, one link for everyone. From $250 a year.

See the team licences

Sources

Every source cited in Cloudflare Made Crystal Clear. Each number matches the [n] marker next to that link in the book's "Go deeper" lists, so you can trace any claim back to its origin.

  1. [1]How Cloudflare works
  2. [2]Cloudflare IP addresses
  3. [3]Cloudflare IP ranges
  4. [4]Cloudflare Ray ID
  5. [5]Cloudflare network
  6. [6]About Cloudflare
  7. [7]Cloudflare plans
  8. [8]Free plan
  9. [9]DDoS protection overview
  10. [10]The folly of charging by bandwidth
  11. [11]Cloudflare S-1 (2019)
  12. [12]Q2 2026 financial results
  13. [13]18 November 2025 outage post-mortem
  14. [14]RFC 9110, section 3.7
  15. [15]RFC 4786
  16. [16]RFC 7094
  17. [17]W3Techs reverse proxy usage
  18. [18]MDN: CDN
  19. [19]Proxy status
  20. [20]Proxy status limitations
  21. [21]Accounts, zones, and profiles
  22. [22]Connection limits
  23. [23]Default cache behavior
  24. [24]Cloudflare HTTP headers
  25. [25]Network ports
  26. [26]Cache responses
  27. [27]Workers pricing
  28. [28]Spectrum
  29. [29]MDN: Proxy servers and tunneling
  30. [30]Onboard a domain
  31. [31]Domain status
  32. [32]Update nameservers
  33. [33]Zone setups
  34. [34]DNS record types
  35. [35]CNAME flattening
  36. [36]DNSSEC
  37. [37]Transfer a domain to Cloudflare
  38. [38]1.1.1.1
  39. [39]The root KSK-2024 rollover
  40. [40]RFC 1912
  41. [41]RFC 9364
  42. [42]RFC 8659
  43. [43]DNSViz
  44. [44]Encryption modes
  45. [45]Flexible mode
  46. [46]Full (strict) mode
  47. [47]Troubleshooting too many redirects
  48. [48]Universal SSL
  49. [49]Universal SSL limitations
  50. [50]Certificate validity periods
  51. [51]Advanced Certificate Manager
  52. [52]Origin CA certificates
  53. [53]Origin CA troubleshooting
  54. [54]Create Origin CA certificate (API)
  55. [55]Always Use HTTPS
  56. [56]HSTS
  57. [57]Minimum TLS version
  58. [58]Authenticated Origin Pulls
  59. [59]Cloudflare, SSL and unhealthy security absolutism
  60. [60]RFC 6797: HSTS
  61. [61]HSTS preload list
  62. [62]RFC 8555: ACME
  63. [63]SSL certificate validity changes
  64. [64]Let's Encrypt: from 90 to 45 days
  65. [65]Origin Cache Control
  66. [66]CDN-Cache-Control
  67. [67]Edge and Browser Cache TTL
  68. [68]Cache keys
  69. [69]Cache Rules
  70. [70]Cache Rules order
  71. [71]Cache Response Rules
  72. [72]Dynamic content and login issues
  73. [73]Purge cache
  74. [74]Invalidate cache
  75. [75]Tiered Cache
  76. [76]Cache Reserve
  77. [77]Smart Shield get started
  78. [78]Compression
  79. [79]Early Hints
  80. [80]Run a speed test
  81. [81]Always Online
  82. [82]RFC 9111: HTTP Caching
  83. [83]Cloudflare Rules overview
  84. [84]Redirects
  85. [85]Create a redirect rule in the dashboard
  86. [86]Bulk Redirects concepts
  87. [87]URL Rewrite Rules
  88. [88]Managed Transforms
  89. [89]Configuration Rules settings
  90. [90]Origin Rules features
  91. [91]Snippets vs Workers
  92. [92]Page Rules migration guide
  93. [93]Cache Rules: Page Rules migration
  94. [94]Rules language operators
  95. [95]Rules language field reference
  96. [96]Rules language functions
  97. [97]Phases list
  98. [98]Cloudflare Trace
  99. [99]cloudflare/wirefilter on GitHub
  100. [100]Building fast interpreters in Rust
  101. [101]Cloudflare WAF
  102. [102]WAF: Get started
  103. [103]WAF concepts
  104. [104]WAF feature interoperability
  105. [105]Allow site admin only from known IPs
  106. [106]Rules language: actions
  107. [107]How rate limiting counts requests
  108. [108]Rate limiting use cases
  109. [109]How DDoS protection works
  110. [110]Configure HTTP DDoS overrides
  111. [111]2025 Q4 DDoS threat report
  112. [112]H1 2026 DDoS threat report
  113. [113]500 Tbps of capacity
  114. [114]Bot Fight Mode
  115. [115]Super Bot Fight Mode
  116. [116]AI bot policies
  117. [117]Managed robots.txt
  118. [118]Turnstile server-side validation
  119. [119]Turnstile testing
  120. [120]Security Center
  121. [121]AWS WAF pricing
  122. [122]AWS WAF vs Cloudflare WAF vs Azure WAF
  123. [123]Cloudflare Tunnel overview
  124. [124]Tunnel fundamentals
  125. [125]Get started with Tunnel
  126. [126]Quick Tunnels
  127. [127]Configuration file
  128. [128]Origin parameters
  129. [129]Terraform guide
  130. [130]Tunnel troubleshooting
  131. [131]HTTPS origins troubleshooting
  132. [132]Tunnel observability
  133. [133]Tunnel FAQ
  134. [134]Upload limits
  135. [135]Delivering videos with Cloudflare
  136. [136]Service-Specific Terms: CDN
  137. [137]cloudflared releases
  138. [138]Pangolin vs Cloudflare Tunnels vs Tailscale
  139. [139]Publish a self-hosted application to the Internet
  140. [140]Access policies
  141. [141]One-time PIN login
  142. [142]Session management
  143. [143]Validate JWTs
  144. [144]Service tokens
  145. [145]Connect an IP/CIDR
  146. [146]Cloudflare One Client
  147. [147]Get started with Gateway
  148. [148]Zero Trust plans
  149. [149]Tailscale Funnel
  150. [150]Expose localhost to the Internet
  151. [151]Cloudflare 5xx errors
  152. [152]Error 522
  153. [153]Error 524
  154. [154]Cloudflare 1XXX errors
  155. [155]Error 413
  156. [156]Workers limits
  157. [157]Security Events
  158. [158]Cloudflare Status
  159. [159]How Workers works
  160. [160]Workers getting started guide
  161. [161]Wrangler configuration
  162. [162]Wrangler commands for Workers
  163. [163]Bindings
  164. [164]Secrets
  165. [165]Routing
  166. [166]Custom Domains
  167. [167]Workers Static Assets
  168. [168]Migrate from Pages to Workers
  169. [169]Cloudflare Pages docs
  170. [170]Workers Builds limits and pricing
  171. [171]Workers Logs
  172. [172]Placement
  173. [173]Cron Triggers
  174. [174]Eliminating Cold Starts 2: shard and conquer
  175. [175]The Deno team joins Cloudflare
  176. [176]Deno: joining Cloudflare
  177. [177]workerd on GitHub
  178. [178]Cloudflare Workers vs Lambda
  179. [179]Choosing a data or storage product
  180. [180]R2 pricing
  181. [181]R2 public buckets
  182. [182]R2 presigned URLs
  183. [183]R2 limits
  184. [184]How KV works
  185. [185]KV limits
  186. [186]D1 limits
  187. [187]D1 migrations
  188. [188]D1 Time Travel
  189. [189]How Hyperdrive works
  190. [190]What are Durable Objects?
  191. [191]Durable Objects WebSockets
  192. [192]Durable Objects limits
  193. [193]Queues get started
  194. [194]Workflows
  195. [195]Workers AI pricing
  196. [196]AI Gateway pricing
  197. [197]Vectorize pricing
  198. [198]Containers
  199. [199]Amazon S3 pricing
  200. [200]Backblaze B2 pricing
  201. [201]R2 vs S3 vs Backblaze B2 (2026)
  202. [202]Cloudflare R2 pricing explained
  203. [203]Plans comparison table
  204. [204]Pro plan
  205. [205]Available notifications
  206. [206]Code Orange: Fail Small, complete
  207. [207]Cloudbleed incident report
  208. [208]CloudFront pay-as-you-go pricing
  209. [209]CloudFront flat-rate plans
  210. [210]Fastly pricing
  211. [211]Bunny CDN pricing
  212. [212]Spain's weekend Cloudflare blocking
  213. [213]Create an API token
  214. [214]Review audit logs
  215. [215]Notifications
  216. [216]Cloudflare Terraform provider
  217. [217]Tunnel system requirements
  218. [218]Update cloudflared
  219. [219]12 September 2025 dashboard and API outage
  220. [220]Cloudflare post-mortem archive
  221. [221]Cloudflare's outage exposes dependence on centralised infrastructure
  222. [222]Useful cloudflared commands
  223. [223]Cloudflare Tunnel changelog
  224. [224]Cloudflare Radar DDoS reports
  225. [225]Cloudflare Community forum
  226. [226]r/CloudFlare
  227. [227]r/selfhosted

New books, in your inbox

One short note when a new Made Crystal Clear guide ships.
No spam, unsubscribe anytime.