Cloudflare integration
Cloudflare runs DNS, a CDN, the Workers edge platform, Turnstile spam protection and cookieless Web Analytics. We host Astro on Workers with the official @astrojs/cloudflare adapter (Cloudflare acquired the company behind Astro in January 2026), and set up DNS, Turnstile and analytics for Framer and Webflow sites the way each platform documents.
| Complexity | Medium |
|---|---|
| Method |
|
| Typical setup | Half a day to 1 day |
| What we do | We set up DNS the way your platform documents it, plus Workers hosting, Turnstile or Web Analytics as needed. |
| Category | Hosting |
Setup by platform
How we set up Cloudflare
Framer
- Embed
DNS can live on Cloudflare with records set to DNS only. A Worker reverse proxy is documented for Pro with the Advanced Hosting add-on or Enterprise, with Rocket Loader off. Web Analytics goes in Framer’s custom code.
Webflow
- Native
- Embed
Turnstile spam protection is built into Webflow’s site settings. For Cloudflare features on the domain, Webflow documents its Orange-to-Orange setup; otherwise records stay DNS only. Webflow Cloud apps run on Cloudflare Workers.
Astro
- Native
@astrojs/cloudflare deploys to Workers (since Astro 6 it no longer targets Pages), with server islands, sessions on Workers KV and the Cloudflare Images binding. Astro stays open source and deployable anywhere.
Next.js
- Native
Cloudflare now recommends vinext, its Vite-based reimplementation of the Next.js API, for Workers; @opennextjs/cloudflare remains for apps that need features vinext lacks, like Partial Prerendering.
Use cases
What teams use it for
Edge hosting for Astro
Static pages and on-demand routes served from Cloudflare’s network, close to every visitor.
Spam-free forms
Turnstile checks visitors without a puzzle, built into Webflow and validated server-side on coded sites.
Privacy-first analytics
A small beacon counts visits with no cookies or storage, even without the Cloudflare proxy.
Before you add it
What to watch out for
Limits
Proxying Framer or Webflow
Orange-cloud proxying can break their SSL or caching. We use DNS only, Webflow O2O, or Framer’s Worker proxy on eligible plans.
Security
Validate Turnstile on the server
Every Turnstile token must be checked with Siteverify on the server. Tokens expire after 300 seconds and work once; the secret key never goes in front-end code.
Consent and GDPR
Analytics without cookies
No cookies, no local storage and no fingerprinting, so the usual cookie-consent trigger is gone. Final compliance is still a legal call.
FAQ
Questions about Cloudflare
Can we put a Framer site behind Cloudflare’s proxy?
Only with a Worker-based reverse proxy, which Framer documents for Pro with Advanced Hosting or Enterprise. For a normal domain connection, keep the Cloudflare records on DNS only.
Did Cloudflare buy Astro?
Cloudflare announced on 16 January 2026 that The Astro Technology Company joined Cloudflare. Astro stays open source under the MIT license and still deploys to Vercel, Netlify and other hosts.
Does Cloudflare Web Analytics need a cookie banner?
It sets no cookies and stores nothing in the browser, so it doesn’t trigger the usual cookie consent rules. Ask your legal team for the final call in your market.
You've reached the end, so now…
Tell us what you’re building.
We’ll help you map the right scope, team, timeline, and next steps.
Book a call