If we're only using `require` wouldn't cert validation not take place? - Cloudflare Developers

© 2026 Hedgehog Software, LLC

More

Communities Docs About Terms Privacy

Colin

CColin If we're only using `require` wouldn't cert validation not take place?

Matt Silverlock

M

Matt Silverlock•10/16/23, 2:07 PM

Let's step back a second.

You are using Hyperdrive and having issues when using the rds-ca-rsa2048-g1rds-ca-rsa2048-g1 CA, correct?
When using the raw TCP connect()connect() API without Hyperdrive you have no issues, correct?

Colin

C

ColinOP•10/16/23, 2:08 PM

correct

Colin

Matt Silverlock

M

Matt Silverlock•10/16/23, 2:10 PM

They both share the same egress/TLS path, so this is odd. We shouldn't be validating the cert.

Matt Silverlock

M

Matt Silverlock•10/16/23, 2:10 PM

(We'll look into it)

Colin

C

ColinOP•10/16/23, 2:11 PM

I should add there’s a little bit of fuzziness - I couldn’t immediately see results when changing the database CA, it took <=10m

Colin

CColin I should add there’s a little bit of fuzziness - I couldn’t _immediately_ see re...

Matt Silverlock

M

Matt Silverlock•10/16/23, 2:11 PM

AWS says that changing the CA is not an immediate action

Colin

C

ColinOP•10/16/23, 2:12 PM

I interpreted that in the context of it waiting for the next maintenance window (which we forced immediately), not that there’d be propagation delay

Colin

C

ColinOP•10/16/23, 2:12 PM

But that is definitely possible

Colin

C

ColinOP•10/16/23, 2:12 PM

and I’m only assuming the underlying issue is cert validation - the error message was very vague

alexrobinson

Aalexrobinson @Colin if you can DM me your account ID (or hyperdrive ID), I'll try tracking do...

Colin

C

ColinOP•10/16/23, 2:20 PM

Sure thing, I added you

kian

K

kian•10/16/23, 4:36 PM

On normal Workers it requires node_compatnode_compat which is a set of polyfills (https://github.com/ionic-team/rollup-plugin-node-polyfills/) so I'm not sure if you'd be able to get that working alongside next-on-pages

kian

K

kian•10/16/23, 4:38 PM

Different thing.

kian

K

kian•10/16/23, 4:39 PM

The Pages team don't plan to add node_compatnode_compat to Pages, maybe you can ask the next-on-pages team to add it to that framework.

Colin

C

ColinOP•10/16/23, 5:52 PM

node-postgresnode-postgres

other drivers requiring node_compatnode_compat is a result of the individual drivers, not Hyperdrive, correct?

kian

K

kian•10/16/23, 5:52 PM

Yeah

kian

K

kian•10/16/23, 5:53 PM

Hyperdrive as far as your Worker is concerned is just a connection string

Colin

C

ColinOP•10/16/23, 5:53 PM

I wonder what part of those libs require it + if we'll ever get a "WinterCG-native" PG driver, since I don't think(?) connect()connect() itself requires it

kian

K

kian•10/16/23, 5:54 PM

I don't think it actually requires them, but they're not conditionally required - esbuild sees they're there, and can't tell that they won't be used at runtime with Workers.

Colin

C

ColinOP•10/16/23, 5:54 PM

I thought that's what separate workerd entrypoint solves

Colin

C

ColinOP•10/16/23, 5:55 PM

^^ or could solve, again I have zero knowledge of these drivers

kian

K

kian•10/16/23, 5:56 PM

node-postgresnode-postgres doesn't have those, so possibly, but I have no idea

Colin

C

ColinOP•10/16/23, 5:59 PM

yeah me neither, and it doesn't impact our Worker luckily, but I've seen a lot of people having the node_compatnode_compat vs nodejs_compatnodejs_compat dilemma in this channel so far

Aliez

A

Aliez•10/17/23, 9:36 AM

How to use hyperdrive in pages functions?

James

J

James•10/17/23, 12:51 PM

Unfortunately Pages Functions doesn’t support node_compat bundling, nor the hyperdrive binding, so I’m not aware of a simple way to get hyperdrive working with Pages, sorry

James

J

James•10/18/23, 4:03 AM

[ERROR] A request to the Cloudflare API (/accounts/cloudflare_account_id/hyperdrive/configs) failed.

not_entitled [code: 10000]

i got this error while using wrangler hyperdrive create name --connection-string="connection_string"

James

JJames [ERROR] A request to the Cloudflare API (/accounts/cloudflare_account_id/hyperdr...

James

J

James•10/18/23, 4:26 AM

anyone

James

JJames [ERROR] A request to the Cloudflare API (/accounts/cloudflare_account_id/hyperdr...

Sam

S

Sam•10/18/23, 9:03 AM

Are you on the paid workers plan?

Sam

SSam Are you on the paid workers plan?

James

J

James•10/18/23, 9:17 AM

Yes

James

JJames [ERROR] A request to the Cloudflare API (/accounts/cloudflare_account_id/hyperdr...

Matt Silverlock

M

Matt Silverlock•10/18/23, 12:30 PM

Can you share your account ID please? (it's safe to share publicly)

Matt Silverlock

MMatt Silverlock Can you share your account ID please? (it's safe to share publicly)

James

J

James•10/18/23, 12:32 PM

1d1c3f97856c67d63a1d69697bcb3b0d

James

JJames 1d1c3f97856c67d63a1d69697bcb3b0d

Matt Silverlock

M

Matt Silverlock•10/18/23, 12:34 PM

You do not have a paid Workers plan.

Matt Silverlock

M

Matt Silverlock•10/18/23, 12:34 PM

Hyperdrive (currently) requires a paid Workers plan per https://developers.cloudflare.com/hyperdrive/get-started/#prerequisites / https://developers.cloudflare.com/workers/platform/pricing/#workers

Matt Silverlock

MMatt Silverlock You do not have a paid Workers plan.

James

J

James•10/18/23, 12:35 PM

this is the test account where we test the things before the production

James

J

James•10/18/23, 12:35 PM

so i think we need to login with that account through wrangler

James

JJames so i think we need to login with that account through wrangler

Matt Silverlock

M

Matt Silverlock•10/18/23, 12:36 PM

Yep. You can use CLOUDFLARE_ACCOUNT_IDCLOUDFLARE_ACCOUNT_ID as an env var too: https://developers.cloudflare.com/workers/wrangler/configuration/#inheritable-keys

Configuration - Wrangler · Cloudflare Workers docs

Wrangler optionally uses a wrangler.toml configuration file to customize the development and deploying setup for a Worker.

Matt Silverlock

MMatt Silverlock Yep. You can use `CLOUDFLARE_ACCOUNT_ID` as an env var too: https://developers.c...

James

J

James•10/18/23, 12:37 PM

thx it's works

Huxwell | Reown

H

Huxwell | Reown•10/20/23, 11:18 AM

Hey team, I'm integrating Hyperdrive on an existing project and it works great.
However when I run the tests using unstable_devunstable_dev my tests are failing with the following error.
Any ideas what I could be doing wrong ? Here's how I init the test worker.

await unstable_dev(entry, {
      experimental: { disableExperimentalWarning: true },
      config: 'wrangler.toml',
    })

await unstable_dev(entry, {
      experimental: { disableExperimentalWarning: true },
      config: 'wrangler.toml',
    })

Which results in the following error.

> Unexpected token F in JSON at position 0
>  ❯ parseJSONFromBytes node_modules/wrangler/wrangler-dist/cli.js:6582:19
>   6580|     __name(utf8DecodeBytes, "utf8DecodeBytes");
>     6581|     function parseJSONFromBytes(bytes) {
>     6582|       return JSON.parse(utf8DecodeBytes(bytes));
>        |                   ^
>     6583|     }
>     6584|     __name(parseJSONFromBytes, "parseJSONFromBytes");

> Unexpected token F in JSON at position 0
>  ❯ parseJSONFromBytes node_modules/wrangler/wrangler-dist/cli.js:6582:19
>   6580|     __name(utf8DecodeBytes, "utf8DecodeBytes");
>     6581|     function parseJSONFromBytes(bytes) {
>     6582|       return JSON.parse(utf8DecodeBytes(bytes));
>        |                   ^
>     6583|     }
>     6584|     __name(parseJSONFromBytes, "parseJSONFromBytes");

Huxwell | Reown

HHuxwell | Reown Hey team, I'm integrating Hyperdrive on an existing project and it works great. ...

Hello, I’m Allie!

H

Hello, I’m Allie!•10/20/23, 11:21 AM

AFAIK unstable_devunstable_dev is local-only, so it might be failing because Hyperdrive doesn't work locally?

meai1

M

meai1•10/22/23, 2:29 AM

Will hyperdrive support Microsoft Sql Server at some point?

meai1

M

meai1•10/22/23, 2:33 AM

also I don't really understand how or why hyperdrive would make uncached queries faster.. it doesn't make sense. Especially not " 6 - 8x faster on uncached queries"

kian

K

kian•10/22/23, 2:36 AM

The blog where I assume you got those numbers from explains it all - https://blog.cloudflare.com/hyperdrive-making-regional-databases-feel-distributed/

meai1

M

meai1•10/22/23, 2:37 AM

so merely connection pooling is doing this? But I think most poeple of course use connection pooling without cloudflare too

kian

K

kian•10/22/23, 2:42 AM

Hyperdrive is specifically for Workers, which are stateless and generally short-lived.

kian

K

kian•10/22/23, 2:43 AM

You can’t hold a connection open in a Worker, it is scoped to that request. Hyperdrive gives you regional connection pools.

kian

K

kian•10/22/23, 2:43 AM

https://blog.cloudflare.com/workers-tcp-socket-api-connect-databases/ talks about it briefly, as the TCP connect API is what Workers (and database drivers for Workers) use to talk to databases.

> Unexpected token F in JSON at position 0
>  ❯ parseJSONFromBytes node_modules/wrangler/wrangler-dist/cli.js:6582:19
>   6580|     __name(utf8DecodeBytes, "utf8DecodeBytes");
>     6581|     function parseJSONFromBytes(bytes) {
>     6582|       return JSON.parse(utf8DecodeBytes(bytes));
>        |                   ^
>     6583|     }
>     6584|     __name(parseJSONFromBytes, "parseJSONFromBytes");

> Unexpected token F in JSON at position 0
>  ❯ parseJSONFromBytes node_modules/wrangler/wrangler-dist/cli.js:6582:19
>   6580|     __name(utf8DecodeBytes, "utf8DecodeBytes");
>     6581|     function parseJSONFromBytes(bytes) {
>     6582|       return JSON.parse(utf8DecodeBytes(bytes));
>        |                   ^
>     6583|     }
>     6584|     __name(parseJSONFromBytes, "parseJSONFromBytes");