It should be faster in theory right? - Cloudflare Developers

© 2026 Hedgehog Software, LLC

More

Communities Docs About Terms Privacy

mr nooli

Mmr nooli It should be faster in theory right?

thomasgauvin

T

thomasgauvin•10/21/24, 8:20 PM

I don't know the specifics of your stack so I can't confirm if it would be faster or not. Hyperdrive makes it faster for you to connect to a regional database from global workers

mr nooli

M

mr nooliOP•10/21/24, 9:22 PM

Let's give it a go and find out ig!

mr nooli

M

mr nooliOP•10/21/24, 10:09 PM

no dice! Just so many errors popping up!

I'm gonna give next-on-pages a go, and if there's no luck there I'm gonna just have to drop the idea of using CF for the mo

thomasgauvin

T

thomasgauvin•10/23/24, 3:37 PM

@mr nooli I think Pages should also have enhanced compatibility, you should use https://developers.cloudflare.com/workers/runtime-apis/nodejs/#get-started

Cloudflare Docs

Node.js compatibility | Cloudflare Workers docs

Node.js APIs available in Cloudflare Workers

AJR

A

AJR•10/25/24, 1:30 PM

New blog about the Hyperdrive Tunnel integration is out. It goes into some depth, if anyone has been curious about how it works.

https://blog.cloudflare.com/elephants-in-tunnels-how-hyperdrive-connects-to-databases-inside-your-vpc-networks/

The Cloudflare Blog

Elephants in tunnels: how Hyperdrive connects to databases inside y...

Hyperdrive (Cloudflare’s globally distributed SQL connection pooler and cache) recently added support for directing database traffic from Workers across Cloudflare Tunnels. We dive deep on what it took to add this feature.

Marat

M

Marat•10/25/24, 11:57 PM

Hello, has anyone faced "Internal Server Error" when creating Hyperdrive configuration?
I tested DB connection from server and local machine. All cloudflare ipv4 ranges where allow listed for accessing DB (https://www.cloudflare.com/ips/)
Also tryed ?ssl=true?ssl=true and ?sslmode=require?sslmode=require .
Any other hints how to fix the problem?

IP Ranges | Cloudflare

This page is intended to be the definitive source of Cloudflare’s current IP ranges.

T

TW•10/26/24, 2:54 AM

Does Hyperdrive support connecting from non-Cloudflare services (e.g. from Fly.io)? Because it seems that changes from CF Workers through Hyperdrive is not propagated immediately to the "bare" DB, so my service in Fly.io that connects directly doesn't see it yet

VIO

V

VIO•10/27/24, 3:27 PM

Hello there, I have a postgres db setup on a machine, a CF tunnel pointing to that db, and Acces service auth setup above all, is there a way to get the connection string by API and simply use that in a nodejs project?

okku

O

okku•10/30/24, 3:22 AM

Hi, has anyone been experiencing caching problem on hyperdrive?
My website cannot connect to a database when connecting through hyperdrive. It looks like it is resolved for 5-10 mins after either switching on and off the caching.
Metrics reads fine, and it can connect to the database with cache and without cache, but it only works for 5-10 mins on both cases.

Nick

N

Nick•10/30/24, 11:36 AM

I try to setup Hyperdrive with a tunnel. Followed all the steps 3 times but get this error:
"Failed to connect to database using the provided information: Internal error."

On the server "cloudflared tail --level debug" and in the dashboards 'Access authentication logs' i dont see anything happen.
Tunnel status on dashboard says "Healthy".
Everytime i try to setup it up in Application > Policies a policy is automaticly created.
First time I run "cloudflared tail --level debug" i got the error "Cannot determine default origin certificate path." which i fixed with this

thomasgauvin

T

thomasgauvin•10/30/24, 7:27 PM

Hyperdrive update:

2024-10-30: New Hyperdrive configurations to private databases using Tunnels are validated before creation to make it easier to troubleshoot connectivity issues

https://developers.cloudflare.com/hyperdrive/platform/changelog/#2024-10-30

SteffTek

S

SteffTek•11/4/24, 12:11 PM

Hey guys! I have a small problem with hyperdrive. I want to test it with a local postgres instance in docker, to which I can connect without problems, but my worker script says it's failing to authenticate due to bad password. Same connection string works with drizzle for migrations

AJR

A

AJR•11/4/24, 1:07 PM

Interesting. Same connection string works in hyperdrive?

What username and password did you provide when making your Hyperdrive? I wonder if there was some shell escaping or something that caused it to not have your DB password stored correctly?

AJR

AAJR Interesting. Same connection string works in hyperdrive? What username and pa...

SteffTek

S

SteffTek•11/4/24, 1:19 PM

yeah sorry im just incredibly stupid. the db controller that fires first somehow still had the old d1 object as param and typescript screamed at me and i just ignored it...

AJR

A

AJR•11/4/24, 1:30 PM

Heh. Happens to the best of us. Good luck!

DoggeSlapper

D

DoggeSlapper•11/6/24, 6:59 PM

I'm trying to use hyperdrive with neon drizzle & postgresjs but I'm getting

✘ [ERROR] Uncaught (async) Error: write CONNECT_TIMEOUT 2a4a9d73ee44058fe7577f3b613e1ae9.hyperdrive.local:5432

✘ [ERROR] Uncaught (async) Error: write CONNECT_TIMEOUT 2a4a9d73ee44058fe7577f3b613e1ae9.hyperdrive.local:5432

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:18 PM

I been trying pg & postgresjs but cant manage to cconnect

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:31 PM

I have reduced to:

const sql = postgres(env.HYPERDRIVE.connectionString, { ssl: true });
const result = await sql`SELECT * FROM pg_tables;`;
console.log(result);

const sql = postgres(env.HYPERDRIVE.connectionString, { ssl: true });
const result = await sql`SELECT * FROM pg_tables;`;
console.log(result);

Without SSL true I get

✘ [ERROR] Uncaught (in promise) PostgresError: connection is insecure (try using `sslmode=require`)

✘ [ERROR] Uncaught (in promise) PostgresError: connection is insecure (try using `sslmode=require`)

AJR

A

AJR•11/6/24, 7:31 PM

Is your database configured with ssl=onssl=on?

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:31 PM

When I have it enabled I get timeout error

Uncaught (in promise) Error: write CONNECT_TIMEOUT f86bad4f8437b66de3bf8efae5264dd3.hyperdrive.local:5432

Uncaught (in promise) Error: write CONNECT_TIMEOUT f86bad4f8437b66de3bf8efae5264dd3.hyperdrive.local:5432

AJR

A

AJR•11/6/24, 7:32 PM

SSL is required to be configured for databases Hyperdrive connects to.

AJR

AAJR SSL is required to be configured for databases Hyperdrive connects to.

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:32 PM

it's ?sslmode=require

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:34 PM

I'm trying to use neon with hyperdrive from local

DoggeSlapper

DDoggeSlapper it's ?sslmode=require

AJR

A

AJR•11/6/24, 7:34 PM

That's the client-side request mode. Is the database itself set up with SSL?

AJR

AAJR That's the client-side request mode. Is the database itself set up with SSL?

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:39 PM

afaik neon uses ssl right?

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:41 PM

export WRANGLER_HYPERDRIVE_LOCAL_CONNECTION_STRING_HYPERDRIVE= my connection string
pnpm run dev

export WRANGLER_HYPERDRIVE_LOCAL_CONNECTION_STRING_HYPERDRIVE= my connection string
pnpm run dev

With ssl I get TIMEOUT

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:47 PM

Error: write CONNECT_TIMEOUT 00cb16054d82c846e02014158175759c.hyperdrive.local:5432
    at connectTimedOut (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/connection.js:259:20)
    at done (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/connection.js:1035:8)
    at new Query (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/query.js:35:9)
    at sql (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/index.js:113:11)
    at null.<anonymous> (file:///Users/leon/code/domainsHunter/apps/workflows/src/index.ts:104:27)
    at async Promise.all (index 0)
    at async Object.queue (file:///Users/leon/code/domainsHunter/apps/workflows/src/index.ts:97:3) {
  code: 'CONNECT_TIMEOUT',
  errno: 'CONNECT_TIMEOUT',
  address: '00cb16054d82c846e02014158175759c.hyperdrive.local',
  port: 5432,
  query: undefined,
  parameters: undefined,
  args: [],
  types: null
}

Error: write CONNECT_TIMEOUT 00cb16054d82c846e02014158175759c.hyperdrive.local:5432
    at connectTimedOut (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/connection.js:259:20)
    at done (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/connection.js:1035:8)
    at new Query (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/query.js:35:9)
    at sql (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/index.js:113:11)
    at null.<anonymous> (file:///Users/leon/code/domainsHunter/apps/workflows/src/index.ts:104:27)
    at async Promise.all (index 0)
    at async Object.queue (file:///Users/leon/code/domainsHunter/apps/workflows/src/index.ts:97:3) {
  code: 'CONNECT_TIMEOUT',
  errno: 'CONNECT_TIMEOUT',
  address: '00cb16054d82c846e02014158175759c.hyperdrive.local',
  port: 5432,
  query: undefined,
  parameters: undefined,
  args: [],
  types: null
}

AJR

A

AJR•11/6/24, 7:53 PM

Ohhh, this is local dev. You're using

wrangler dev

wrangler dev

?

AJR

AAJR Ohhh, this is local dev. You're using `wrangler dev`?

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:54 PM

yes I'm trying to connect to neon during my local development with hyperdrive

AJR

A

AJR•11/6/24, 7:55 PM

Got it. This is a known issue, fix is going out with the next

workerd

workerd

release.

AJR

A

AJR•11/6/24, 7:55 PM

https://github.com/cloudflare/workerd/pull/3037

GitHub

SQC-333: Support Hyperdrive with SSL in dev mode by ReppCodes · Pul...

We have historically used sslmode=disable in when running wrangler dev, with the intention of not forcing folks to set up SSL on a local test DB. Unfortunately this causes friction because many ho...

AJR

A

AJR•11/6/24, 7:56 PM

Sorry I don't have a better answer than that.

AJR

A

AJR•11/6/24, 7:56 PM

Workaround is to connect to PG locally on Docker or something, so you can develop in the meantime.

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:56 PM

ok ok, was getting crazy on this hehehehe

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:57 PM

I think a got an idea to make it work locally for now

AJR

A

AJR•11/6/24, 7:58 PM

I keep this one as an alias, I use it so much. Would need to load up your schemas too, if you have those as .sql.sql files.

docker run -e POSTGRES_PASSWORD=password -p 5432:5432 postgres:16 -c ssl=on -c ssl_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem -c ssl_key_file=/etc/ssl/private/ssl-cert-snakeoil.key

docker run -e POSTGRES_PASSWORD=password -p 5432:5432 postgres:16 -c ssl=on -c ssl_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem -c ssl_key_file=/etc/ssl/private/ssl-cert-snakeoil.key

DoggeSlapper

D

DoggeSlapper•11/6/24, 7:59 PM

https://github.com/supabase-community/pg-gateway I think think I can make it work using this as a proxy

GitHub

GitHub - supabase-community/pg-gateway: Postgres wire protocol for ...

Postgres wire protocol for the server-side. Contribute to supabase-community/pg-gateway development by creating an account on GitHub.

DoggeSlapper

D

DoggeSlapper•11/6/24, 8:00 PM

but will first test with local docker postgresql

AJR

AAJR I keep this one as an alias, I use it so much. Would need to load up your schem...

Isaac McFadyen

I

Isaac McFadyen•11/6/24, 8:06 PM

Is a key called snakeoilsnakeoil actually built into the Docker container?

Isaac McFadyen

I

Isaac McFadyen•11/6/24, 8:06 PM

That's funny

AJR

A

AJR•11/6/24, 8:06 PM

It's a linux-ism.
https://eleni.blog/2019/04/10/the-snakeoil-ssl-certificate/

Eleni Fragkiadakiefrag

The snakeoil ssl certificate

I recently came across this one as part of a PostgreSQL upgrade I run on my Linux (Debian) box. Going from version PostgreSQL 9.4 to 9.5 worked like a charm. Upgrading to version 9.6 did not go as …

DoggeSlapper

D

DoggeSlapper•11/6/24, 8:07 PM

Thanks @AJR now with local wrangler dev without ssl works fine, excited for new release.
Loving workers so far

AJR

AAJR It's a linux-ism. https://eleni.blog/2019/04/10/the-snakeoil-ssl-certificate/

AJR

A

AJR•11/6/24, 8:07 PM

It's been on every dev workstation I've ever used. Threw me for quite a loop when a new teammate on a Mac used my alias and it failed on them...

DoggeSlapper

DDoggeSlapper Thanks @AJR now with local wrangler dev without ssl works fine, excited for new ...

AJR

A

AJR•11/6/24, 8:08 PM

Glad to hear it! Good luck building!

Nick

N

Nick•11/6/24, 8:09 PM

My experience with Hyperdrive in production has been that it’s quite unreliable. Every so often, identical requests will encounter this error:
"Internal error." at node_modules/pg/lib/client.js:535:17

No errors are shown in the Hyperdrive Metrics Dashboard.

The documentation states that this issue is on Cloudflare's end and advises contacting support. However, with other issues I never receive a response from support, so I’m looking for an alternative solution. Any suggestions?

Nick

NNick My experience with Hyperdrive in production has been that it’s quite unreliable....

AJR

A

AJR•11/6/24, 8:14 PM

Post/DM your Hyperdrive ID and I'll take a look. Also, can you share other info about what kinds of queries or how often you're seeing this? Is this an "every 10 queries" kind of thing, or "every 100k queries"?

Assuming these are rare failures, the guidance here would be the same as any other connection pooler you're connecting to over a network -- application-level retry logic is strongly encouraged.

AJR

AAJR It's been on every dev workstation I've ever used. Threw me for quite a loop wh...

Isaac McFadyen

I

Isaac McFadyen•11/6/24, 8:18 PM

Ha - interesting.

Noxydude

N

Noxydude•11/8/24, 4:10 PM

Hey team - I'm with UiPath Academy (academy.uipath.com) which is built on Hyperdrive (with pg) and getting 23-million weekly Hyperdrive queries. Just submitted a Limit Request Form after some of our users were getting errors during high-traffic (see second screenshot for the errors we get). Just wanted to send a message here to further troubleshoot and ensure the Limit Request Form is noticed, given this is high priority for us! Thank you.

AJR

A

AJR•11/8/24, 4:35 PM

Thanks for bringing that to our attention. I'll discuss with the team during this morning's meeting.

AJR

A

AJR•11/8/24, 4:38 PM

In terms of troubleshooting, some things you can do to buy yourself headroom:

Do you have transactions, especially around multiple queries, that you don't need? Those will limit how aggressively your connections get multiplexed and therefore increase your risk of pool exhaustion.

Do you have any particularly long-running queries that could be optimized on your origin DB, such as with indexes or more regular vacuuming?

Error: write CONNECT_TIMEOUT 00cb16054d82c846e02014158175759c.hyperdrive.local:5432
    at connectTimedOut (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/connection.js:259:20)
    at done (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/connection.js:1035:8)
    at new Query (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/query.js:35:9)
    at sql (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/index.js:113:11)
    at null.<anonymous> (file:///Users/leon/code/domainsHunter/apps/workflows/src/index.ts:104:27)
    at async Promise.all (index 0)
    at async Object.queue (file:///Users/leon/code/domainsHunter/apps/workflows/src/index.ts:97:3) {
  code: 'CONNECT_TIMEOUT',
  errno: 'CONNECT_TIMEOUT',
  address: '00cb16054d82c846e02014158175759c.hyperdrive.local',
  port: 5432,
  query: undefined,
  parameters: undefined,
  args: [],
  types: null
}

Error: write CONNECT_TIMEOUT 00cb16054d82c846e02014158175759c.hyperdrive.local:5432
    at connectTimedOut (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/connection.js:259:20)
    at done (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/connection.js:1035:8)
    at new Query (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/query.js:35:9)
    at sql (file:///Users/leon/code/domainsHunter/node_modules/.pnpm/postgres@3.4.5/node_modules/postgres/cf/src/index.js:113:11)
    at null.<anonymous> (file:///Users/leon/code/domainsHunter/apps/workflows/src/index.ts:104:27)
    at async Promise.all (index 0)
    at async Object.queue (file:///Users/leon/code/domainsHunter/apps/workflows/src/index.ts:97:3) {
  code: 'CONNECT_TIMEOUT',
  errno: 'CONNECT_TIMEOUT',
  address: '00cb16054d82c846e02014158175759c.hyperdrive.local',
  port: 5432,
  query: undefined,
  parameters: undefined,
  args: [],
  types: null
}