If you are a normal user
link
link
hoge1.js
Cache
cache control?
cache control? with authorization request header
Token Authentication
sample
Access Authentication (右クリックIncognito）
sample
Access JWT checker
sample
by hono
Image optimization
Polish (other site, polish is disabled when image resizing is enabled.)
Mirage (mobileブラウザで)
Mirage force preload only (mobileブラウザで)
Resizeing with Workers
workers
Cloudinary の変換を模倣し、入れ替える例
Resizing with URL format
url format
Webp at Server side
jpeg or webp? server side control (if accept=image/webp, then webp)
Images
Images: 署名付きURL (imagedelivery.net)
Images: Custom domains
Stream
Stream: Player (cloudflarestream.com)
Stream: 署名付きURL
Stream: Accessによる認証(Pages custom domains + functions)
--->
man
注
pages custom domain とzone hold
stream Media Transformation (imagesのような)
Access 後ろのStream: 署名付きURL
↑のffmpeg 監査 /api, /graphql, /mcp
API shield (MTLS)
Dev Docs
WARP は OFF にする
右クリック Incognito で
持ち込みCA API Shield MTLS（BOUNCA自前）+ OCSP good (Fuku Oka) or revoked (Miya Zaki)
Cloudflare CA API Shield MTLS spotify API
Page Shields
reload, reload
Challenge Pages
Turnstile implicit
Turnstile explicit
Turnstile Pre-clearance enabled
Managed Challenge (右クリックIncognito）
Turnstile ヘルスチェック（ダミーKey）クエリ key=1,2,3
Bot Management JavaScript Detections
JSD test
Other serurity tools
Browser Integrity Check
Waiting Room
WR 全部Queue HTML応答
↑ をfetch で呼ぶテスト (WR, Response header rewrite 噛んでるから消さないように)
R2
sample Blog
Dev docs
managed public access
Static Site: R2 public access: r2.dev subdomain
Custom domain
Static Site: R2 public access: custom domain (r2.devと比べて、CacheやPolishなどの違いを見よ)
注）R2はTiered Cache未対応。R2はWorkerで動き、Workerがオリジンの場合Tiered Cacheされない
Private buckets
Worker to R2
リスト
追加
削除
Presigned URL
10 sec, Workers Custom Domains + Access, Cached
10 sec, workers.dev domain, Not Cached
S3 origin
sample Blog
worker rewritest to S3 alloewd user-agent and IP
S3 direct (UAを→にしてcurlしてみよ "02F2F1C1-5C6F-410D-A08F-BD2D014FD3F4" Src IPが合わずにDeny)
worker rewritest to S3 alloewd SigV4 in Authorization hdr
S3 direct (SigV4 がないので Deny)
S3 virtual host s3-v.oymk.work
S3 non virtual host, origin rewrite
S3 Web site endpoint, no HTTPS support
LTM
LTM behind cloudflared
LTM behind Magic WAN
WAF + LTM + GATEWAY
Public Host + Internet Gateway
Host header rewrite
sample Blog
Snippets
html rewriter
Others
A minimal AJAX page
My Apps
Images transformation + R2 + AI created image
Live Streaming (Calls WHIP/WHEP)
Blog Gacha
Domain Ranking
Site Info
業務サイト
ステータスコードDB
任意のステータスコード
WebRTC-TextToSpeachのデモ
Pages
Blog
Stream呼び出し、/video にFunctionsで署名認証ヴェリファイ JP only
Speed
Unload
?
Sec
Redirect
?
Sec
App cache
?
Sec
DNS lookup
?
Sec
TCP TLS
?
Sec
Request-TTFB
?
Sec
Response
?
Sec
Processing
?
Sec
Load
?
Sec
Load time:
?
Sec
link
catch point ref
catch point ref
catch point ref