I'm pretty sure the answer to this is "heck no", but would it possible to have a unique outgoing por

I'm pretty sure the answer to this is "heck no", but would it possible to have a unique outgoing port for each Hyperdrive config? (And I don't think it would be too insane, since it's only 25 ports per paid Workers account that would need to be "reserved".) Or even 1 unique port per account would be nice.

That would be really nice to firewall based off of.

Ddave I'm pretty sure the answer to this is "heck no", but would it possible to have a...

AJR•2/5/25, 3:40 PM

Hmmm. I'll ask the team, it's not something we've talked about afaik

AAJR I really need to write that "how hyperdrive works" blog post soon. I'm finally ...

daveOP•2/5/25, 3:42 PM

I would be curious if using Hyperdrive reduces bandwidth pricing (and by how much) for Google Cloud customers, since Cloudflare has a reduced bandwidth price iirc.

Ddave I would be curious if using Hyperdrive reduces bandwidth pricing (and by how muc...

AJR•2/5/25, 3:43 PM

The goal is that it should, yes. Still needs some work to get all the way there, I believe. I don't work with that project a ton and there is some nuance IIRC.

AAJR The goal is that it should, yes. Still needs some work to get all the way there...

daveOP•2/5/25, 3:44 PM

iirc it's already reduced pricing, no?

daveOP•2/5/25, 3:45 PM

https://cloud.google.com/network-connectivity/docs/cdn-interconnect#pricing

AJR•2/5/25, 3:46 PM

It gets complicated. It goes GCP->Workers->Hyperdrive for ingress, so I believe that's already reduced. Egress from ??->Workers->Hyperdrive->GCS is the one I'm not certain about.

daveOP•2/5/25, 3:46 PM

Workers->Hyperdrive->GCS would be ingress from Google's standpoint (which is free)

AAJR Nope. Soon(tm), though. Part of the reason that this is taking so long is th...

daveOP•2/5/25, 3:55 PM

You should be able to automatically tell who did the allowlist by trying to connect from a new IP. Then whoever fails, email them giving them a warning that they need to use the new proper official list of IP ranges.

AJR•2/5/25, 3:57 PM

We landed with just never migrating them, plus courtesy email. Same difference, though.

AAJR We landed with just never migrating them, plus courtesy email. Same difference,...

daveOP•2/5/25, 4:03 PM

oh, is there a list already somewhere secret?

AJR•2/5/25, 4:04 PM

Of the shared address pool? Not publicly, but folks are clever. Hazard of making tools for other devs, I guess. In some regions things are stable enough that folks noticed that all Hyperdrive connections were coming in from a small number of addresses, and eventually just coded that into their firewall rules.

AJR•2/5/25, 4:05 PM

(that's my theory, based on the available evidence. maybe someone dug up a list I don't know about)

oritwoen•2/6/25, 12:07 PM

Is there any eta for mysql support?

Ooritwoen Is there any eta for mysql support?

AJR•2/6/25, 12:14 PM

We generally don't put out dates in advance of releases. That tends to make nobody happy.

It's being actively worked on, though.

AAJR We generally don't put out dates in advance of releases. That tends to make nob...

oritwoen•2/6/25, 12:15 PM

Okay, good for me, thanks

Sam•2/8/25, 8:45 PM

Can you connect hyperdrive to a digital ocean managed postgres db or is the IP range still not allowed?

SSam Can you connect hyperdrive to a digital ocean managed postgres db or is the IP r...

AJR•2/9/25, 1:33 PM

Sorry, not sure I understand the question.

Hyperdrive doesn't refuse to egress to DO ranges. Is there an issue with ingressing to DO from the shared pool?

AAJR Sorry, not sure I understand the question. Hyperdrive doesn't refuse to egress ...

Sam•2/9/25, 1:37 PM

Hey thanks for reply on this. Yes when I try to setup hyperdrive + a managed DO database in cf dashboard it errors

I have setup connections with supabase in the past successfully and I searched this channel for issues with DO leading me to believe it’s with DO ip range?

AJR•2/9/25, 1:52 PM

Interesting. I searched and you're right, TCP connect from workers to DO seems to have some issues.

I'm not sure if it's due to the shared address range or not, though.

I'll check Monday with my teammate who's working on the migration to the CF IP ranges and see if we have a way to test if DO cooperates with those. I'd be curious to know, honestly

AAJR Interesting. I searched and you're right, TCP connect from workers to DO seems t...

Sam•2/9/25, 2:02 PM

I have digital ocean and azure credits to burn and the latter seem to be priced crazily so would be ideal!

Maybe if there is no solution with public there is one with private connection?

I’d be open to using d1 instead also but I have about 50gb of data already so I don’t know if limits can be increased to say 100gb (for future scale)

Also happy to discuss using r2 as this is mostly a primary store of library like data with reads being carried out from my typesense instance.

I am on CF startups program also

AJR•2/9/25, 2:16 PM

FYI @thomasgauvin ^

Might be in a better spot to address what will fit your use case best.

Stilau•2/9/25, 2:23 PM

Hey,
I am not sure what Hyperdrive is, but does this make it possible to have a database being hidden behind the Cloudflare Network?

SStilau Hey, I am not sure what Hyperdrive is, but does this make it possible to have a ...

AJR•2/9/25, 2:43 PM

Yes. Our tunnel integration does exactly that.

AAJR Yes. Our tunnel integration does exactly that.

Stilau•2/9/25, 2:45 PM

I want to hide my database behind Cloudflare's Network without needing to have the CloudflaredCloudflared application on all devices..

Is that what Hyperdrive fixes?

AJR•2/9/25, 2:52 PM

Hyperdrive is a way to talk from Workers to a centralized database. We integrate with tunnels too so you'd only need have cloudflared running once somewhere within your vpc to egress the traffic to your DB from.

Based on your questions I'm assuming you're not running your application on Workers?

AAJR Hyperdrive is a way to talk from Workers to a centralized database. We integrat...

Stilau•2/9/25, 2:56 PM

No I am not..

AJR•2/9/25, 2:57 PM

Okay. This is another interesting use case for non-workers ingress for us. I'll mention this over to our product folks.

AJR•2/9/25, 2:59 PM

For now though, Hyperdrive probably isn't going to be a lot of help for your use case, I'm afraid.

Stilau•2/9/25, 3:00 PM

Alright, thanks tho for the help

AAJR FYI @thomasgauvin ^ Might be in a better spot to address what will fit your use...

Sam•2/9/25, 6:18 PM

Sweet thank you, let me know on the digital ocean stuff when back into the office just to get a firm answer if possible vs not.

Then I can explore alternatives if its a definite no!

Happy to speak to @thomasgauvin

also. As exploring alternatives is totally fine too.

Nick•2/10/25, 10:30 AM

Is Hyperdrive on the Cloudflare IP range? (So we can whitelist those)

SSam I have digital ocean and azure credits to burn and the latter seem to be priced ...

daveOP•2/10/25, 1:39 PM

You could probably use cloudflared just fine

NNick Is Hyperdrive on the Cloudflare IP range? (So we can whitelist those)

Isaac McFadyen•2/10/25, 3:56 PM

hyperdrive

Isaac McFadyen•2/10/25, 3:56 PM

TLDR: not yet.

IIsaac McFadyen TLDR: not yet.

thomasgauvin•2/10/25, 4:52 PM

This is correct, Hyperdrive is not on Cloudflare's IP range @Nick

João Castro•2/10/25, 9:42 PM

Are there any plans for supporting custom connection limits per region? Right now we seem to be hitting that limit and losing performance by being routed to a nearby region.

AJR•2/10/25, 9:43 PM

We're moving away from regional pooling, which should dramatically improve that without the additional config needed

AJR•2/10/25, 9:43 PM

Post your Hyperdrive ID and I'll enroll you early, we're still teeing up the migration for everyone

AAJR Post your Hyperdrive ID and I'll enroll you early, we're still teeing up the mig...

João Castro•2/10/25, 9:44 PM

707875b010bc457e9a80dfddb19ef919

João Castro•2/10/25, 9:44 PM

Thanks!

João Castro•2/10/25, 9:44 PM

This was created recently btw, so not sure if it already has the new version

AJR•2/10/25, 9:44 PM

Just cut over for new configs last week, so it'd depend

AJR•2/10/25, 9:44 PM

let me check

AJR•2/10/25, 9:45 PM

Ah yeah, you're already on global pools

AJR•2/10/25, 9:45 PM

Moving to thread

Tthomasgauvin This is correct, Hyperdrive is not on Cloudflare's IP range @Nick

daveOP•2/10/25, 10:04 PM

It is on CF’s ASN though iirc?

Ddave It is on CF’s ASN though iirc?

Hello, I’m Allie!•2/10/25, 10:07 PM

IIRC it is on a CF ASN, but not the CF ASN

daveOP•2/10/25, 10:07 PM

Ahhh… I definitely missed that.

Shados•2/10/25, 11:46 PM

Hello~ I was reading about hyperdrive, and wanted to confirm something: is hyperdrive ONLY for accessing a database from workers, or can it be used for connecting from other type of distributed applications (that aren't hosted on Cloudflare?).

I assume the answer is "nope, sorry!", since it looks like Hyperdrive operates as a worker binding, but just want to confirm.

SShados 👋 Hello~ I was reading about hyperdrive, and wanted to confirm something: is hy...

AJR•2/11/25, 12:04 AM

Yes, that is correct. We've kicked around opening it up more, but have not committed to that yet. Hyperdrive operates as a standalone service, so it is technically possible, though would take some work.

If you're willing to discuss your use case a bit, it'd help us as we evaluate.

I'm pretty sure the answer to this is "heck no", but would it possible to have a unique outgoing por

Similar Threads