Is there a way to enforce my Worker function has read-only access to data stored in D1 on an API/net

Is there a way to enforce my Worker function has read-only access to data stored in D1 on an API/network level?
I don't think there is, but wanted to confirm

RRobert Is there a way to enforce my Worker function has read-only access to data stored...

Larry•8/1/25, 5:30 PM

You are correct. No way to do it directly. You could proxy it through another worker where you did that or you could use a DO and save a network hop compared to the Worker only proxy

RRobert Is there a way to enforce my Worker function has read-only access to data stored...

Larry•8/1/25, 5:33 PM

D1 is implemented in DO so that approach would be just as efficient but it’s more work for you and you lose read replication

Llambrospetrou There have been several bugfixes shipped over the past few months since the init...

Zack•8/1/25, 9:59 PM

Oh yes, I should probably give you some feedback, since I turned on replication again a few weeks back we have now torn down our individual databases for each region and exclusively use the replicas now

Zack•8/1/25, 10:02 PM

Now that it bypasses the replica for the first request if the replica isn't active, we've had no issues except seemingly the occasional issue with APAC where the network latency spikes

ZZack Oh yes, I should probably give you some feedback, since I turned on replication ...

lambrospetrou•8/2/25, 6:27 AM

Thanks for getting back to us

If you notice anything, please reach out.

Llambrospetrou There have been several bugfixes shipped over the past few months since the init...

gruntlord6•8/2/25, 8:04 PM

So even without the API we can benefit from read replicas now?

onewug•8/2/25, 10:11 PM

hi! is this example really working in vitest watch mode for you? it fails after a second run with error code SQLITE_CANTOPEN https://github.com/cloudflare/workers-sdk/tree/main/fixtures/vitest-pool-workers-examples/d1

GitHub

workers-sdk/fixtures/vitest-pool-workers-examples/d1 at main · clo...

Home to Wrangler, the CLI for Cloudflare Workers® - cloudflare/workers-sdk

workers-sdk/fixtures/vitest-pool-workers-examples/d1 at main · clo...

onewug•8/2/25, 10:24 PM

created an issue: https://github.com/cloudflare/workers-sdk/issues/10195

GitHub

vitest-pool-workers-examples/d1 fails in vitest watch mode · Issue...

What versions & operating system are you using? System: OS: macOS 15.5 CPU: (8) arm64 Apple M2 Memory: 188.55 MB / 24.00 GB Shell: 4.0.2 - /opt/homebrew/bin/fish Binaries: Node: 22.17.1 - ~/.lo...

gruntlord6•8/3/25, 5:14 AM

Yea I feel like they are saying there's still a benefit which would be big even if you don't use the api

gruntlord6•8/3/25, 5:18 AM

Yea they just worded it in a way I felt like should ask

gruntlord6•8/3/25, 5:18 AM

Not breaking things is of course good lol

Ggruntlord6 So even without the API we can benefit from read replicas now?

lambrospetrou•8/3/25, 7:11 AM

If by "API" you mean the Sessions API, then you still have to use it to take advantage of replicas, otherwise there is no way to guarantee your queries are consistent. Without using the Sessions API, only the primary executes your queries even if they flow through replicas. If by API you mean the REST API, read replication is not yet exposed in the REST API.

Pepper•8/3/25, 9:37 PM

small suggestion: there should be a pop up warning if you try to leave d1 studio with unsaved edits

zsueo•8/4/25, 10:10 AM

hey is anyone else having issues with the wrangler d1 cli?

zsueo•8/4/25, 10:10 AM

i keep running into internal errors when trying to dump the db from the cli

zsueo•8/4/25, 10:10 AM

and the dashboard is being oddly slow

zsueo•8/4/25, 10:12 AM

ah thanks

PPepper small suggestion: there should be a pop up warning if you try to leave d1 studio...

Visal .In•8/4/25, 12:24 PM

I will work on it. Thanks for feedback

Matthew•8/4/25, 12:34 PM

I've created a D1 database in ENAM, enabled read replication, am querying it from a worker running in Manchester GB, but all my queries are going to the primary (

meta.served_by_primary

meta.served_by_primary

= true). The Cloudflare D1 dashboard says ENAM is the only region. Is there a minimum amount of time, or number of queries, before replicas are created? Have I missed a step?

Matthew•8/4/25, 12:48 PM

(to add, I'm querying with

DB_REPLICATED.withSession("first-unconstrained")

DB_REPLICATED.withSession("first-unconstrained")

)

MMatthew I've created a D1 database in ENAM, enabled read replication, am querying it fro...

lambrospetrou•8/4/25, 2:47 PM

There is no minimum time or anything. The first time just needs a few requests so that the information propagates to the location creating the requests, and then just the time for the replica in that region to boot (you won't be blocked on this time).

But, if you only send a request every few minutes, then all of them will end up in the primary.

How many requests are you sending? Do you still not see replicas processing your queries?

I'm querying with DB_REPLICATED.withSession("first-unconstrained")

Just to confirm, you are doing reads only right?

Llambrospetrou There is no minimum time or anything. The first time just needs a few requests s...

Matthew•8/4/25, 3:02 PM

~400 queries over the last few hours, all reporting served by primary. Query is a SELECT.

MMatthew ~400 queries over the last few hours, all reporting served by primary. Query is ...

lambrospetrou•8/4/25, 3:03 PM

DM me your database ID and account ID and I can take a look.

Llambrospetrou DM me your database ID and account ID and I can take a look.

lambrospetrou•8/4/25, 3:53 PM

Closing the loop here, the issue was transient during the replication toggle originally when the triggered it not actually persisting the replica enablement. Toggling it on/off again fixed it. We will look into the original error and improve it so that you don't have to toggle it manually.

Abakir•8/4/25, 6:07 PM

This might be a dumb question if a 1000 users try to write to the database at the same time or make a query it won’t fault correct.

I know there are limits of d1 database

AAbakir This might be a dumb question if a 1000 users try to write to the database at th...

James•8/4/25, 6:49 PM

single threaded db, you got 1000ms in a second, gotta work out your usage constraints based on that

Abakir•8/4/25, 6:58 PM

Yes but can multiple people read and write to the database at the same time

AAbakir Yes but can multiple people read and write to the database at the same time

Larry•8/4/25, 7:16 PM

With read replicas multiple can read at the same time, but only one writes at the precise same time. However, as @Ahz was implying, if your definition of "the same time" is in the same second or 100ms, you could have a number of them satisfy that. D1 is built on Durable Objects (DO) and the general understanding that you can have no more than about 1000 requests per second. With write, I suspect that's much lower, but how much would depend upon your writes.

workerBee•8/5/25, 11:04 AM

I've found that it's pretty easy to lock up D1 with concurrent writes, so I add a few ms wait time to all write requests.

WworkerBee I've found that it's pretty easy to lock up D1 with concurrent writes, so I add ...

Larry•8/5/25, 11:10 AM

Can you define “lock up”? Wouldn’t it be better to sense pushback and respond accordingly?

LLarry Can you define “lock up”? Wouldn’t it be better to sense pushback and respond ac...

Larry•8/5/25, 11:15 AM

It should send a 429 too many requests code

workerBee•8/5/25, 11:17 AM

More specifically, if the write requests are originating from a Queue, staggering the requests becomes more important.

Billy•8/5/25, 12:20 PM

I'm trying to simply download my D1 db and I'm seeing a lot of historical conversations about the inability to do that now, is that still the case? Sqlite dbs are just files and I'm hoping to be able to download a read-only version upon request... ideally through an API but I only see the GET for the info, not the actual db. I also don't see a way with wrangler and the time-travel thing anymore now that the "backup" subcommand is gone. I'd prefer not to have to export and then the create another db from that if possible.

BBilly I'm trying to simply download my D1 db and I'm seeing a lot of historical conver...

dandoen•8/5/25, 12:31 PM

have you seen this: https://developers.cloudflare.com/d1/best-practices/import-export-data/#export-an-existing-d1-database and https://developers.cloudflare.com/workflows/examples/backup-d1/ ?

only challenge is that a running export will block other database requests

dandoen•8/5/25, 12:33 PM

per d1-database, the export blocking db requests is getting addressed hopefully this year

Ddandoen have you seen this: https://developers.cloudflare.com/d1/best-practices/import-e...

Billy•8/5/25, 12:36 PM

Thank you, I did see this sadly. I was hoping there was a direct link to the db somehow

Billy•8/5/25, 12:38 PM

this is another option fwiw: https://developers.cloudflare.com/workflows/examples/backup-d1/

Cloudflare Docs

Export and save D1 database

Send invoice when shopping cart is checked out and paid for

BBilly I'm trying to simply download my D1 db and I'm seeing a lot of historical conver...

lambrospetrou•8/5/25, 12:47 PM

You can export your database into an SQL file: https://developers.cloudflare.com/d1/best-practices/import-export-data/#export-an-existing-d1-database As mentioned, while exporting the D1 database is blocked from executing other queries, so this would be the main limitation depending on your requirements.

We do know this falls short in some cases, depending on your database size, and we have plans to improve the export flow. For now, this is the D1 provided way, but as others linked above you can try different libraries doing that too.

LLarry With read replicas multiple can read at the same time, but only one writes at th...

Abakir•8/5/25, 1:12 PM

Will creating a queue for writes be a safe thing to do just in case two writes are trying to happen at the same time?

AAbakir Will creating a queue for writes be a safe thing to do just in case two writes a...

Larry•8/5/25, 1:23 PM

It has some ability to queue built in. When you exceed that, you get back a 429

LLarry It has some ability to queue built in. When you exceed that, you get back a 429

Larry•8/5/25, 1:26 PM

I don't know if D1 does this but other 429 implementations include a header telling you how long to wait before retrying. Inspect the headers in a 429 to confirm if D1 does that… or maybe someone here knows

Abakir•8/5/25, 1:49 PM

Okay will test it out myself and will do

AAbakir Will creating a queue for writes be a safe thing to do just in case two writes a...

lambrospetrou•8/5/25, 2:05 PM

If we step back, what is the main thing you are trying to solve here? Is it the write throughput? How many writes per second do you want to support, and how long does each write take?

Maybe I missed it in the thread above, but adding queues also comes with complexity and their own throughput problems, so want to make sure you are not solving a problem that doesn't exist.

Original question: This might be a dumb question if a 1000 users try to write to the database at the same time or make a query it won’t fault correct.

1000 writes at the same time once will just be serialized, and eventually all go through. Now if you have 1K writes per second consistently, that will almost certainly trigger an overload error to be returned to you and queries starting to be rejected.

Llambrospetrou If we step back, what is the main thing you are trying to solve here? Is it the ...

Abakir•8/5/25, 2:08 PM

It won't happen often for us, but we are trying to prepare if it did so I see it is not a problem for us currently.

However we are scared of the 10GB limit more we might not reach it until after two years, what do you think the best approach to this problem with be with D1 beacause I do not like the idea of scaling databases horizantally, maybe because it does not make that sense for me that each user has it's own database and it feels as managing a users info will be a nightmare that way.

Let me know if I misunderstood anything from what I am saying

AAbakir It won't happen often for us, but we are trying to prepare if it did so I see it...

lambrospetrou•8/5/25, 2:14 PM

If you will be having 1K users writing per second regularly, and you have fear of the 10GB, then I suggest split your database. You don't have to go one DB per user, but maybe split by table if there are obvious ways to split, and have N DBs where you can share the load. If the queries are the same and splitting by table doesn't make sense, then sharding among N DBs works fine too.

It depends how often you will be having this load, and how soon you will hit the storage limit.

Llambrospetrou If you will be having 1K users writing per second regularly, and you have fear o...

Abakir•8/5/25, 2:15 PM

Is there a good example of how to sharding N DBs. I would love to continue to use Cloudflare I just want good tutorials to follow and I can't find many to see how this process feels for larger databases

AAbakir Is there a good example of how to sharding N DBs. I would love to continue to us...

lambrospetrou•8/5/25, 2:17 PM

My usual approach is to pick the identifier that is always accessible for a request (e.g. account ID) and hash(id) % Nhash(id) % N to get the DB to use. And then do the normal thing you would do using that DB.

I want to re-iterate though, that if as you say you are 2 years away from this load and hitting the limit, you might as well just leave it for later. But, sharding in general doesn't mean one per user as many folks assume (and some docs/posts say). It's up to you and your data model to find something that works within your needs. If you are going to full-blown one DB per user, using Durable Objects directly is more suited.

Llambrospetrou My usual approach is to pick the identifier that is always accessible for a requ...

Abakir•8/5/25, 2:28 PM

Thank you for this info I just wanted to know this info

Larry•8/5/25, 5:35 PM

we are scared of the 10GB limit more we might not reach it until after two years

IF you approach that limit, you could shard as is being discussed or you could switch to something else. Cloudflare even uses Postgres in places.

Llambrospetrou You can export your database into an SQL file: https://developers.cloudflare.com...

Billy•8/5/25, 7:11 PM

One of the reasons I wanted to use sqlite was the ease of moving a file around, so this is disappointing, but I'm grateful for all that has been done around d1, maybe things will be simpler one day. Thanks for clarifying the plans.

Is there a way to enforce my Worker function has read-only access to data stored in D1 on an API/net

Similar Threads

Similar Threads

Similar Threads