
Cloudflare
Made Crystal Clear
A practical, visual guide to DNS, caching, security, Zero Trust tunnels, and building on Workers with Cloudflare
Cloudflare says it powers one in five websites, yet most people meet it through a redirect loop, a 522 error, or a "how is this free?" thread. This visual guide follows one request from browser to server and shows you what happens at every step. Move your domain safely, get HTTPS right, cache without leaking, block bad traffic on the free plan, publish home apps with Tunnel and a real login, then build and price apps on Workers.
- Pages
- 289
- Level
- Beginner to advanced
- Status
- Available
Inside the book
- 01Why Cloudflare: The Problem and the Network
- 02How Cloudflare Works: The Request Path
- 03Getting Started: Put Your Domain on Cloudflare
- 04SSL/TLS Without Redirect Loops
- 05Caching and Speed
- 06Rules: Redirects, Rewrites, and the Rules Language
- 07Security: WAF, Rate Limiting, DDoS, Bots, and Turnstile
- 08Cloudflare Tunnel: Self-Host Without Opening Ports
- 09Zero Trust Access: Put a Login in Front of Everything
- 10Troubleshooting: 52x, 1033, Too Many Redirects, and Friends
- 11The Developer Platform and Your First Worker
- 12Storage and State: R2, KV, D1, Durable Objects, and Workers AI
- 13Pricing, the Free Tier, and the Business Case
- 14Production and Best Practices
- 15Learning Path, Cheat Sheet, and Resources
You'll leave with
- Move a domain without breaking email
- Set Full (strict) SSL and end redirect loops
- Cache safely and read cf-cache-status
For teams
Put Cloudflare on every desk at your company.
One licence, every book in the series, one link for everyone. From $250 a year.
Sources
Every source cited in Cloudflare Made Crystal Clear. Each number matches the [n] marker next to that link in the book's "Go deeper" lists, so you can trace any claim back to its origin.
- [1]How Cloudflare works
- [2]Cloudflare IP addresses
- [3]Cloudflare IP ranges
- [4]Cloudflare Ray ID
- [5]Cloudflare network
- [6]About Cloudflare
- [7]Cloudflare plans
- [8]Free plan
- [9]DDoS protection overview
- [10]The folly of charging by bandwidth
- [11]Cloudflare S-1 (2019)
- [12]Q2 2026 financial results
- [13]18 November 2025 outage post-mortem
- [14]RFC 9110, section 3.7
- [15]RFC 4786
- [16]RFC 7094
- [17]W3Techs reverse proxy usage
- [18]MDN: CDN
- [19]Proxy status
- [20]Proxy status limitations
- [21]Accounts, zones, and profiles
- [22]Connection limits
- [23]Default cache behavior
- [24]Cloudflare HTTP headers
- [25]Network ports
- [26]Cache responses
- [27]Workers pricing
- [28]Spectrum
- [29]MDN: Proxy servers and tunneling
- [30]Onboard a domain
- [31]Domain status
- [32]Update nameservers
- [33]Zone setups
- [34]DNS record types
- [35]CNAME flattening
- [36]DNSSEC
- [37]Transfer a domain to Cloudflare
- [38]1.1.1.1
- [39]The root KSK-2024 rollover
- [40]RFC 1912
- [41]RFC 9364
- [42]RFC 8659
- [43]DNSViz
- [44]Encryption modes
- [45]Flexible mode
- [46]Full (strict) mode
- [47]Troubleshooting too many redirects
- [48]Universal SSL
- [49]Universal SSL limitations
- [50]Certificate validity periods
- [51]Advanced Certificate Manager
- [52]Origin CA certificates
- [53]Origin CA troubleshooting
- [54]Create Origin CA certificate (API)
- [55]Always Use HTTPS
- [56]HSTS
- [57]Minimum TLS version
- [58]Authenticated Origin Pulls
- [59]Cloudflare, SSL and unhealthy security absolutism
- [60]RFC 6797: HSTS
- [61]HSTS preload list
- [62]RFC 8555: ACME
- [63]SSL certificate validity changes
- [64]Let's Encrypt: from 90 to 45 days
- [65]Origin Cache Control
- [66]CDN-Cache-Control
- [67]Edge and Browser Cache TTL
- [68]Cache keys
- [69]Cache Rules
- [70]Cache Rules order
- [71]Cache Response Rules
- [72]Dynamic content and login issues
- [73]Purge cache
- [74]Invalidate cache
- [75]Tiered Cache
- [76]Cache Reserve
- [77]Smart Shield get started
- [78]Compression
- [79]Early Hints
- [80]Run a speed test
- [81]Always Online
- [82]RFC 9111: HTTP Caching
- [83]Cloudflare Rules overview
- [84]Redirects
- [85]Create a redirect rule in the dashboard
- [86]Bulk Redirects concepts
- [87]URL Rewrite Rules
- [88]Managed Transforms
- [89]Configuration Rules settings
- [90]Origin Rules features
- [91]Snippets vs Workers
- [92]Page Rules migration guide
- [93]Cache Rules: Page Rules migration
- [94]Rules language operators
- [95]Rules language field reference
- [96]Rules language functions
- [97]Phases list
- [98]Cloudflare Trace
- [99]cloudflare/wirefilter on GitHub
- [100]Building fast interpreters in Rust
- [101]Cloudflare WAF
- [102]WAF: Get started
- [103]WAF concepts
- [104]WAF feature interoperability
- [105]Allow site admin only from known IPs
- [106]Rules language: actions
- [107]How rate limiting counts requests
- [108]Rate limiting use cases
- [109]How DDoS protection works
- [110]Configure HTTP DDoS overrides
- [111]2025 Q4 DDoS threat report
- [112]H1 2026 DDoS threat report
- [113]500 Tbps of capacity
- [114]Bot Fight Mode
- [115]Super Bot Fight Mode
- [116]AI bot policies
- [117]Managed robots.txt
- [118]Turnstile server-side validation
- [119]Turnstile testing
- [120]Security Center
- [121]AWS WAF pricing
- [122]AWS WAF vs Cloudflare WAF vs Azure WAF
- [123]Cloudflare Tunnel overview
- [124]Tunnel fundamentals
- [125]Get started with Tunnel
- [126]Quick Tunnels
- [127]Configuration file
- [128]Origin parameters
- [129]Terraform guide
- [130]Tunnel troubleshooting
- [131]HTTPS origins troubleshooting
- [132]Tunnel observability
- [133]Tunnel FAQ
- [134]Upload limits
- [135]Delivering videos with Cloudflare
- [136]Service-Specific Terms: CDN
- [137]cloudflared releases
- [138]Pangolin vs Cloudflare Tunnels vs Tailscale
- [139]Publish a self-hosted application to the Internet
- [140]Access policies
- [141]One-time PIN login
- [142]Session management
- [143]Validate JWTs
- [144]Service tokens
- [145]Connect an IP/CIDR
- [146]Cloudflare One Client
- [147]Get started with Gateway
- [148]Zero Trust plans
- [149]Tailscale Funnel
- [150]Expose localhost to the Internet
- [151]Cloudflare 5xx errors
- [152]Error 522
- [153]Error 524
- [154]Cloudflare 1XXX errors
- [155]Error 413
- [156]Workers limits
- [157]Security Events
- [158]Cloudflare Status
- [159]How Workers works
- [160]Workers getting started guide
- [161]Wrangler configuration
- [162]Wrangler commands for Workers
- [163]Bindings
- [164]Secrets
- [165]Routing
- [166]Custom Domains
- [167]Workers Static Assets
- [168]Migrate from Pages to Workers
- [169]Cloudflare Pages docs
- [170]Workers Builds limits and pricing
- [171]Workers Logs
- [172]Placement
- [173]Cron Triggers
- [174]Eliminating Cold Starts 2: shard and conquer
- [175]The Deno team joins Cloudflare
- [176]Deno: joining Cloudflare
- [177]workerd on GitHub
- [178]Cloudflare Workers vs Lambda
- [179]Choosing a data or storage product
- [180]R2 pricing
- [181]R2 public buckets
- [182]R2 presigned URLs
- [183]R2 limits
- [184]How KV works
- [185]KV limits
- [186]D1 limits
- [187]D1 migrations
- [188]D1 Time Travel
- [189]How Hyperdrive works
- [190]What are Durable Objects?
- [191]Durable Objects WebSockets
- [192]Durable Objects limits
- [193]Queues get started
- [194]Workflows
- [195]Workers AI pricing
- [196]AI Gateway pricing
- [197]Vectorize pricing
- [198]Containers
- [199]Amazon S3 pricing
- [200]Backblaze B2 pricing
- [201]R2 vs S3 vs Backblaze B2 (2026)
- [202]Cloudflare R2 pricing explained
- [203]Plans comparison table
- [204]Pro plan
- [205]Available notifications
- [206]Code Orange: Fail Small, complete
- [207]Cloudbleed incident report
- [208]CloudFront pay-as-you-go pricing
- [209]CloudFront flat-rate plans
- [210]Fastly pricing
- [211]Bunny CDN pricing
- [212]Spain's weekend Cloudflare blocking
- [213]Create an API token
- [214]Review audit logs
- [215]Notifications
- [216]Cloudflare Terraform provider
- [217]Tunnel system requirements
- [218]Update cloudflared
- [219]12 September 2025 dashboard and API outage
- [220]Cloudflare post-mortem archive
- [221]Cloudflare's outage exposes dependence on centralised infrastructure
- [222]Useful cloudflared commands
- [223]Cloudflare Tunnel changelog
- [224]Cloudflare Radar DDoS reports
- [225]Cloudflare Community forum
- [226]r/CloudFlare
- [227]r/selfhosted
Also in the series
35 more titles, one tool or topic each. Swipe or use the arrows.
New books, in your inbox
One short note when a new Made Crystal Clear guide ships.
No spam, unsubscribe anytime.



































