I have two containers: Container A, which sends a POST request to Container B, which exposes an endp

I have two containers: Container A, which sends a POST request to Container B, which exposes an endpoint. I don't want to expose that endpoint publicly, so I want the request to be sent internally. How can I do this?

I'm able to do this with a worker using service bindings, but I haven't been able to get it working in a container to container setup. For context my Container A code is written in Go.

kracozebr•9/5/25, 6:35 PM

Helo. I'm new to cloudflare and I wonder if I can host several containers. I have 2 services (2 docker containers) with network between them like docker compose or kubernetes. Is this possible?
UPD: Ok. I see it possible. May be there is some quide or example (there is no example in docs )

TTangoBee I have two containers: Container A, which sends a POST request to Container B, w...

gruntlord6•9/5/25, 8:06 PM

Maybe use rpc?

Kkracozebr Helo. I'm new to cloudflare and I wonder if I can host several containers. I hav...

gruntlord6•9/5/25, 8:07 PM

You can have as many instances between projects as you want, up to the current resource limits (10 instances iirc)

Ppandalambda2 This is the big question, I'm not even sure most of CF staff can answer, it's b...

gruntlord6•9/5/25, 8:08 PM

It's been pretty quiet here in regards to the egress, they have yet to clarify it

gruntlord6•9/5/25, 8:08 PM

Containers to R2 for image compression is atm my only real use case so it would be nice to have that transparency

Original message was deleted

M.S•9/5/25, 9:54 PM

You've summed it up perfectly. I'm in total agreement

TTangoBee I have two containers: Container A, which sends a POST request to Container B, w...

pandalambda2•9/6/25, 7:56 AM

that's not a supported pattern. put the hostname for worker B (which talks to container B) behind cloudflare zero trust, create a service token, create a policy that gives access to that service token. give container A the client id /client secret of said service token, container A http client connects to container B via worker B passing CF-Access-Client-Id / and CF-Access-Client-Secret HTTP headers and access manages the authentication. actually very nice.

pandalambda2•9/6/25, 7:59 AM

the frankenstein alternative would be embedding something like tailscale in your containers, and disabling sleepAfter, but you'd still need a form of healthcheck such as cron worker that /healthchecks worker B that brings up container B in the event the container was killed for another reason. dont do it

pandalambda2•9/6/25, 8:01 AM

you can also add ASN == cloudflare if you really want as part of a policy. the http requests from container A won't have the standard cf.worker.origin headers (or whatever they called)

pandalambda2•9/6/25, 8:53 AM

@TangoBee https://forms.gle/AGSq54VvUje6kmKu8 if you really want tcp/udp ingress

Google Docs

Containers TCP/UDP Ingress

Give us information on why you would like TCP or UDP ingress for Containers.

1984 Ford Laser•9/6/25, 11:28 AM

I really hope the TCP/UDP ingress idea is still moving forward, have lots of use cases to move over to Containers if that can be sorted

blyedev•9/6/25, 5:43 PM

Would it be possible to host wordpress on containers? Has anyone ever gotten it to work? Would it be decent?

Isaac McFadyen•9/6/25, 6:21 PM

There's no persistent disks, so you'd need to mount something that persists e.g. R2 using a FUSE client

pandalambda2•9/7/25, 4:39 AM

doesn't wordpress require mysql too? so you need something like planetscale (db) and hyperdrive (connector) too. also you want the container stabled close to your DB as wordpress makes dozens or roundtrip db queries and I dont think its currently possible to do smart placement or pin specific locations on containers yet

Jadugar_Jaggu•9/7/25, 7:58 AM

Containers vs Digital Ocean droplets

pandalambda2•9/7/25, 8:01 AM

not this again. The 2 CPUs means nothing on DigitalOcean, compare to dedicated CPUs plans for a fairer comparison... which it seems they don't even offer.

Ppandalambda2 not this again. The 2 CPUs means nothing on DigitalOcean, compare to dedicated C...

Jadugar_Jaggu•9/7/25, 8:03 AM

Comparison is between cloudflare and digital , both platforms based on sharing resources.

pandalambda2•9/7/25, 8:03 AM

yes, but there is no expectation of what a CPU means on DO, look at digitalocean container pricing

pandalambda2•9/7/25, 8:04 AM

https://www.digitalocean.com/products/app-platform

DigitalOcean App Platform | Build, Deploy, and Scale Apps with Ease

Build, deploy, and scale apps quickly using a simple, cost-effective solution. Go from code to production in just a few clicks

Ppandalambda2 yes, but there is no expectation of what a CPU means on DO, look at digitalocean...

Jadugar_Jaggu•9/7/25, 8:04 AM

I don't get it, are you saying cloudflare containers have more performance over digital?

pandalambda2•9/7/25, 8:06 AM

not necessarily at any particular moment. but they have stable baseline, you have an expectation, for example a core on EC2 is expected to deliver stable performance comparable to 1.6ghz xeon core 24/7, whilst a DO core might give something resembling 4ghz but then when barry runs his video encoding you get 400mz

pandalambda2•9/7/25, 8:06 AM

mhz *

pandalambda2•9/7/25, 8:06 AM

if you really want an eye opener go look at a lowendtalk.com you get 50 cores for 5usd

pandalambda2•9/7/25, 8:07 AM

but it means absolute nothing, just trash

Ppandalambda2 not necessarily at any particular moment. but they have stable baseline, you hav...

Jadugar_Jaggu•9/7/25, 8:09 AM

If that the case then which service is in comparison of cloudflare containers, if not DO

pandalambda2•9/7/25, 8:10 AM

aws fargatye

pandalambda2•9/7/25, 8:10 AM

gcp cloudrun

pandalambda2•9/7/25, 8:10 AM

digitalocean container platform

Jadugar_Jaggu•9/7/25, 8:10 AM

When I see 0.0625 vCPU, the first thought that pops into my mind is whether it’s actually capable or even worth trying, lol

pandalambda2•9/7/25, 8:10 AM

linode managed kubernetes

pandalambda2•9/7/25, 8:11 AM

azure has one too

pandalambda2•9/7/25, 8:11 AM

if you want to burden of managing a firecracker host too then you can look at vultr and linode but at their dedicated cpu plans

pandalambda2•9/7/25, 8:14 AM

2 prime examples, contabo and php-friends come up regularly, they have a physical node with maybe 96 cores, but they sell maybe 9600 cores per 1u machine and hope that usage patterns means they dont have too much churn

pandalambda2•9/7/25, 8:14 AM

its a minefield of fraudulent marketing

Jadugar_Jaggu•9/7/25, 8:17 AM

Thanks for info. I was thinking to shift my workloads to cloudflare containers. But I am not able to compare between other site's vcpu and cloudflare's vcpu. Currently i am using OVH, 8 GB ram, 4vcpu

pandalambda2•9/7/25, 8:18 AM

I'm not too familar with OVH's current offering, but unless the cores are advertised as dedicated then you don't have an expectation of a baseline, could be good in the morning and crap at night, etc.. and the sad thing is now some hosts like contabo and php-friends have hijacked the terminology of dedicated to mean something else (i.e. it isn't dedicated)

pandalambda2•9/7/25, 8:21 AM

you're best moving a test workload and doing some load testing to understand how your app performs, you probably need a fraction of what OVH offers if OVH vcpus are completely undefined

khangal•9/7/25, 7:05 PM

I tried to deploy container with official container template using account api token. Token has containers edit permission. But pnpm run deploy is failing with message saying i need “containers:write” permission. I’m confused. It’s 5$ paid account.

Ppandalambda2 doesn't wordpress require mysql too? so you need something like planetscale (db)...

gruntlord6•9/8/25, 1:56 AM

they have a wip sqlite adapter but yes, the base install would need to be on mysql and migrated

Kkhangal I tried to deploy container with official container template using account api t...

gruntlord6•9/8/25, 1:57 AM

its an api token permission you need to enable

Ggruntlord6 they have a wip sqlite adapter but yes, the base install would need to be on mys...

pandalambda2•9/8/25, 2:49 AM

even if its compatible with D1 you'll have all sorts of eventual consistency issues since with containers as you'd have to use the D1 rest API which doesn't support sessions, so any parts are fast moving - comments and reactions then it's going to run like reddit on a bad day

Ppandalambda2 even if its compatible with D1 you'll have all sorts of eventual consistency iss...

gruntlord6•9/8/25, 3:28 AM

Couldn't the durable objects be used to save to d1 or its own SQL?

pandalambda2•9/8/25, 3:46 AM

yeah I guess so but it's a lot of work - youll need to write your own wordpress persistence adapter too i guess - instead of just banging it on fly.io or fargate,

pandalambda2•9/8/25, 3:47 AM

your own sqlite as in pull it in from r2 each time the container starts and push it back to r2 on each important write and/or periodically feels hacky as hell too, and of course you're limited to 1 instance

pandalambda2•9/8/25, 3:49 AM

i just don't think CF are (or ever have been with any of their compute products) interested in capturing the legacy app market such as php/mysql apps of yonder years, even with containers, more aimed at 12 factor apps, and whilst some people have done some sick stuff to to lift legacy apps like wordpress, joomla, magento into this new world it's just a terrible fit imo.

pandalambda2•9/8/25, 3:53 AM

and a shrinking market too, a new kid 10 years ago might be pirating cuteftp and throwing up a php apps on some cpanel disaster, where as now they're more likely to be using claude, copilot, or loveable and spitting out some isomorphic javascsript/tyepscript app onto vercel, cf, aws, etc..

Ppandalambda2 your own sqlite as in pull it in from r2 each time the container starts and push...

gruntlord6•9/8/25, 11:29 AM

Well the durable object is persistent right?

Ppandalambda2 i just don't think CF are (or ever have been with any of their compute products)...

gruntlord6•9/8/25, 11:32 AM

I personally switched to astro for that reason but I'm sure many people are unwilling or unable to do so. Once there's official out of the box SQLite support for WordPress I'm pretty confident it would be simple to make it work with d1/durable objects, right now there's a lot more involved since it's early access and not supported out of the box

Ggruntlord6 Well the durable object is persistent right?

pandalambda2•9/8/25, 12:16 PM

yes, but then you need a custom wordpress persistence adapter to talk to the DO via http or websockers, sqlite in is in-process - its not like postgresql / mysql where you can just change from localhost to another ip/hostname, so it needs to be in the container if you plan to use I presume the default wordpress support for sqllite, and then managing that persistence yourself to me sounds a challenge I'd rather do without. let see, maybe wordpress come out with CF first-class support, it would be smart (after years of bad decisions)

pandalambda2•9/9/25, 1:09 AM

nope, radio silence out of CF, no clarification on even egress yet..

I have two containers: Container A, which sends a POST request to Container B, which exposes an endp

Similar Threads

Similar Threads

Similar Threads