Whats the best route to take to build PR previews? I already have it set to rebuild on a merge to ma

Whats the best route to take to build PR previews? I already have it set to rebuild on a merge to main, but when a dev puts in a PR I want a preview build to be generated

AAndrew0091 Whats the best route to take to build PR previews? I already have it set to rebu...

Hard@Work•3/18/25, 4:12 PM

For Workers for Platforms? I don't think it does CI at all

ajmallesh•3/19/25, 12:52 AM

Hey Cloudflare community! Need help with a very strange Workers routing issue.

We have two environments with two entirely separate domains - Playground (acmepg.com) and Sandbox (acmesbx.com)

Issue: Requests to *.acmepg.com*.acmepg.com (playground env) are sometimes handled by our sandbox Worker instead of our playground Worker, even though are fully isolated in separate wrangler environments with separate domains with their own dns config.

It's intermittent but happens frequently - which makes it very confusing. For example sometimes on my laptop it routes correctly, but on my colleague's laptop it routes incorrectly and vice versa.

Setup:

Two Workers: acme-play-routeracme-play-router for playground, acme-sbx-routeracme-sbx-router for sandbox
Routes config (wrangler.toml) (note: we have workers.dev disabled and using Routes instead of custom domain):
```toml
[env.sandbox]
name = "acme-sbx-router"
routes = [{ pattern = ".acmesbx.com/", zone_name = "acmesbx.com" }]

[env.playground]
name = "acme-play-router"
routes = [{ pattern = ".acmepg.com/", zone_name = "acmepg.com" }]

- DNS config for each of our domains:

- DNS config for each of our domains:

acmesbx.com Type=CNAME, Name=, Conent=acmesbx.com
acmepg.com Type=CNAME, Name=, Conent=acmepg.com

The sandbox Worker correctly returns 403 when it sees playground domains (using Hono framework):

The sandbox Worker correctly returns 403 when it sees playground domains (using Hono framework):

// Referer validation in our middleware
if (referer) {
const refererUrl = new URL(referer);
const refererHost = refererUrl.hostname.toLowerCase();
const isValidReferer = refererHost.endsWith(baseDomain);

if (!isValidReferer) {
console.log(❌ Referer validation failed: ${refererHost} does not match ${baseDomain}❌ Referer validation failed: ${refererHost} does not match ${baseDomain});
return c.text(Forbidden: Invalid refererForbidden: Invalid referer, 403);
}
}
```

But why is the sandbox Worker handling these requests at all? The domains are completely different.

Any ideas what could cause this cross-environment routing issue? Missing something in our route definitions/wrangler config or DNS config?

Ashar Irfan•3/19/25, 11:16 PM

Does anyone know if Cloudflare has deployed this feature to Workers for Platform? Was looking forward to make this available via the compatibility flag to our customers today, but it is not working in my initial testing.

https://developers.cloudflare.com/changelog/2025-03-11-process-env-support/

Cloudflare Docs

Access your Worker's environment variables from process.env

Walshy•3/20/25, 2:03 AM

Yes this should work for wfp too

Palash Bansal•3/24/25, 7:33 PM

Hello, I am using the upload worker module API to deploy workers and to update bindings. It works for normal bindings, but for secrets, its not deleting the values that are not being passed in a request metadata bindings. The existing secrets are being kept even though not being passed in the bindings array.
This makes sense as you might not want to remove the secrets, but quickly checking the network calls in cloudflare dashboard, looks like on secret delete(single/multiple), it does the similar thing(create a new worker version with script code and metadata with bindings), and secrets are being deleted (unless I am missing some request). Only difference is that I am using "Workers Script Upload API" and its using "Version Upload API"

I am looking for some documentation regarding this on what the expected behaviour is with regards to secrets and other bindings. There is also keep_bindingskeep_bindings option in the types, but that doesn't seem to make a difference.
What I have found yet is this - https://developers.cloudflare.com/workers/configuration/multipart-upload-metadata/#bindings
Thanks

Walshy•3/25/25, 9:54 AM

You can delete a secret with: https://developers.cloudflare.com/api/resources/workers_for_platforms/subresources/dispatch/subresources/namespaces/subresources/scripts/subresources/secrets/methods/delete/

Walshy•3/25/25, 9:54 AM

Secrets inherit by default

WWalshy You can delete a secret with: <https://developers.cloudflare.com/api/resources/w...

Palash Bansal•3/25/25, 4:24 PM

Hey thanks for replying, but this only allows to delete one secret at a time, which is not ideal as it requires deploying several worker versions which is not atomic and some rollback flow would be required incase one of the request failed.
We are giving users option to edit and remove secrets similar to the cloudflare dashboard, where they can perform edits and commit to the worker. So is it possible to do it in a single call?
Also is the functional difference(relating to secret inheritance) I am seeing between the version and upload api an actual api spec difference, or I am doing something incorrectly?
Or is there a "type" value like "inherit" which can be used to delete a secret?

Palash Bansal•3/25/25, 4:30 PM

Another question I have related to bindings in workers for platforms is How do access control for bindings work?
If we try to bind a D1 database or R2 bucket to a worker in user space, would that work? Does it require additional setting/configuration? Or is that not possible and we need to use SQLite-in-DO for that?
The docs do mention - You can use any Workers bindings with the dynamic dispatch Worker or any user Workers.You can use any Workers bindings with the dynamic dispatch Worker or any user Workers., but then how does it control which bindings it can bind to? If it doesn't then is it on the developers to ensure that the users are not able to edit the bindings as then they can get access to any resource on the main CF account

Original message was deleted

Palash Bansal•3/25/25, 5:01 PM

Can we assume this won't change in the future and bindings made to the user workers now will keep the access forever?

rob•3/27/25, 2:48 AM

Whats the limit on WfP for SQLite DB on DO? is it still 50 per account ?

Vvmg I'm trying to work with local development mode and get the following error: `[...

daniel•3/30/25, 7:35 PM

did u find a fix? i'm experiencing the same thing

Ddaniel did u find a fix? i'm experiencing the same thing

daniel•3/30/25, 9:07 PM

yeah looks like local dev is too outdated and most of it is broken, --remote with latest wrangler works perfectly though

Alex99like•3/31/25, 7:30 AM

Hey folks!

Need help! Getting a strange error in a Cloudflare Worker in production

I’m seeing the following error on prod:

sync error RuntimeError: memory access out of bounds

What’s confusing is that I’m not using any WebAssembly (WASM) modules in my project. It’s all plain TypeScript and regular dependencies.
Has anyone run into something like this? Could it be that one of the packages secretly uses WASM under the hood, or is this something else entirely?
Would really appreciate any ideas or pointers

AAlex99like Hey folks! ⚠️ Need help! Getting a strange error in a Cloudflare Worker in produ...

DaniFoldi•3/31/25, 10:07 AM

likely one of the packages is using wasm under the hood - can you share your list of dependencies?

DDaniFoldi likely one of the packages is using wasm under the hood - can you share your lis...

Alex99like•3/31/25, 10:13 AM

The worker is a member of the orchestra and uses hono to scale the hono.js prisma it has no more dependencies

Alex99like•3/31/25, 10:15 AM

could there be a problem that one of the databases starts to degrade and the query time increases in the worker crashes, or is it the worker's problem?

DaniFoldi•3/31/25, 10:17 AM

hmm, do you happen to be using prisma's driver adapters?

Alex99like•3/31/25, 10:18 AM

Yes, I use planetscale

DaniFoldi•3/31/25, 10:18 AM

we've also hit this issue, and so have many others, see: https://github.com/prisma/prisma/issues/25714

unfortunately, we ended up having to switch to drizzle which has worked perfectly from the first moment - so that's the only thing I can comfortably recommend

GitHub

Possible memory leak using driver adapters with cloudflare D1 · Is...

Bug description Around the 16th november we started to get errors when making prisma calls in our production prisma/cloudflare workers/d1 setup. The errors consisted of either: "memory access ...

DDaniFoldi we've also hit this issue, and so have many others, see: https://github.com/pris...

Alex99like•3/31/25, 10:20 AM

The problem occurs under heavy load when there is a simultaneous request for 500 records. The worker is supposed to fetch data from the primary database and move it to the D1 replica. This issue does not occur when requesting fewer than 500 records.

Alex99like•3/31/25, 10:22 AM

or maybe the problem is that I access one worker 500 requests at the same time through bindings, does it have limits?

AAlex99like or maybe the problem is that I access one worker 500 requests at the same time t...

DaniFoldi•4/1/25, 12:36 PM

I don't think there is a limit for that

DaniFoldi•4/1/25, 12:36 PM

likely it's just the prisma driver code leaking memory :/

DDaniFoldi I don't think there is a limit for that

Alex99like•4/2/25, 3:55 AM

I was able to solve this problem by making one large query to the database instead of 8 small ones.

Alex99like•4/2/25, 3:57 AM

I have another problem, some of the requests are crumbling, but everything is fine when I call them again.
Error:
The script will never generate a response.

Ricky U•4/8/25, 2:01 PM

How would i update the wragnler version on pages build? similar to node, i set it in env vars, but how abuot wrangler, its using 3.101 i need v4.

Vlad Lykhonis•4/8/25, 3:39 PM

Hi all. Does anyone know how to pass arguments to a user worker? I see a dispatcher has a way to allocate user worker with parameters. But if I just pass anything in there rather than empty object, I get a parameter not found in worker error. Another question would be how to access those parameters in user worker later upon fetch?

I am also using Hono as fetch/app. Regards.

DaniFoldi•4/8/25, 4:38 PM

Hey, if you're looking at the second argument of the dispatcher binding, that should just be an empty object - it's some internal thing apparently, which (in my opinion) should have never been exposed.

The way to pass custom arguments is to take advantage of RPC, which is supported by wfp. Your user worker can be an RPC entrypoint, just like your workers, and then you can pass in any arguments just like with normal bindings.

There's a special one for outbound workers, but that data isn't exposed to the user worker, as the goal of that is to pass trusted data around

DDaniFoldi Hey, if you're looking at the second argument of the dispatcher binding, that sh...

Vlad Lykhonis•4/8/25, 6:26 PM

Okay. Totally in agreement regarding args. Right now im already rebuilding requests coming to my worker and then passed to user worker. I guess another option would fit here adding custom headers as a json to pass some state.
I just wanted to make sure I’m not making some too stupid decisions here.
Thanks

AAnand when we programmatically upload worker scripts, how do we have handle npm import...

Hard@Work•4/8/25, 10:31 PM

You do that yourself. If you are using the API, you need to bundle/minify/patch scripts yourself

AAnand ahhh okay.. So upload it as many files or one file?

Hard@Work•4/8/25, 10:59 PM

I would probably bundled it into a single file, unless you are using stuff like WASM

AAnand @Hard@Work sorry to at you. Is there an api channel that I can get help from?

Hard@Work•4/8/25, 11:12 PM

There are the SDK channels, but none for calling the API directly

AAnand can you point me to the sdk channel. its almost the samethihng .. let me tryu th...

Hard@Work•4/8/25, 11:15 PM

Which language? There is:

#cloudflare-go
#cloudflare-python
#cloudflare-ruby
#cloudflare-typescript
#terraform-provider-cloudflare

DDaniFoldi Hey, if you're looking at the second argument of the dispatcher binding, that sh...

Vlad Lykhonis•4/9/25, 6:56 AM

btw forgot to mention. Example of workers for platforms is from 2022 and it has a type for worker args, but it is also simply empty object. Maybe it is a feature work in progress, not sure if someone can shed some light on this.

Regardless, looks like rpc and/or mutation of request are at least 2 work around to pass args to user worker in the meantime.

Adnan A.•4/9/25, 7:21 AM

Hi, is it possible for a worker within Workers for Platforms to have its own rate limit binding?

Walshy•4/9/25, 9:46 AM

Of course. Each user worker can have its own bindings

Walshy•4/9/25, 9:46 AM

You can specify them in the upload metadata

Adnan A.•4/9/25, 3:23 PM

Thank you

oli•4/9/25, 6:02 PM

Hi, is there any timeline/update on the pre-release wrangler@dispatch-namespaces-devwrangler@dispatch-namespaces-dev branch making it into main? It seems quite behind the latest wrangler and i'd like to use some of the cool new stuff

oli•4/9/25, 6:11 PM

just saw this - https://github.com/cloudflare/workers-sdk/pull/5622

seems a ways off, any alternate recommendations for running workers for platforms locally in the meantime? might just make my own hacky fork

red2green•4/10/25, 5:45 PM

How do I setup an account to use workers for platforms (for a SaaS app)? Where can I see the pricing for ssl certs for my customers + running custom workers for end customers etc?

Whats the best route to take to build PR previews? I already have it set to rebuild on a merge to ma

Similar Threads

Similar Threads

Similar Threads