## Workers VPC - TCP connections via connect() over VPC Networks
[VPC Network](https://developers.cloudflare.com/workers-vpc/configuration/vpc-networks/) bindings now support the [`connect()`](https://developers.cloudflare.com/workers/runtime-apis/tcp-sockets/) Socket API for raw TCP connections to private destinations, in addition to HTTP traffic via `fetch()`.
This means Workers can now open TCP sockets to any private service reachable through the bound Cloudflare Tunnel, Cloudflare Mesh, or Cloudflare WAN on-ramp — Redis, Memcached, MQTT, custom binary protocols, or any other TCP-based service.
- wrangler.jsonc
```jsonc
"$schema": "./node_modules/wrangler/config-schema.json",
"binding": "PRIVATE_NETWORK",
"network_id": "cf1:network",
binding = "PRIVATE_NETWORK"
network_id = "cf1:network"
async fetch(request: Request, env: Env) {
// Open a TCP connection to a private Redis instance
const socket = await env.PRIVATE_NETWORK.connect("10.0.1.50:6379");
// Write a Redis PING command
const writer = socket.writable.getWriter();
await writer.write(new TextEncoder().encode("PING\r\n"));
return new Response(socket.readable);
const browserTools = createBrowserTools({
browser: this.env.BROWSER,
session: { mode: "dynamic" },
const browserTools = createBrowserTools({
browser: this.env.BROWSER,
session: { mode: "dynamic" },
const runtime = createCodemodeRuntime({
executor: new DynamicWorkerExecutor({ loader: this.env.LOADER }),
connectors: [new GithubConnector(this.ctx, this.env, connection)],
const result = streamText({
tools: { codemode: runtime.tool() },
const runtime = createCodemodeRuntime({
executor: new DynamicWorkerExecutor({ loader: this.env.LOADER }),
connectors: [new GithubConnector(this.ctx, this.env, connection)],
const result = streamText({
tools: { codemode: runtime.tool() },
await child.chat(message, callback, {
name: "get_user_timezone",
description: "Get the caller's timezone",
parameters: { type: "object" },
onClientToolCall: async ({ toolName, input }) => {
return runClientTool(toolName, input);
await child.chat(message, callback, {
name: "get_user_timezone",
description: "Get the caller's timezone",
parameters: { type: "object" },
onClientToolCall: async ({ toolName, input }) => {
return runClientTool(toolName, input);
const voice = useVoiceAgent({
outputDeviceId: selectedSpeakerId,
const voice = useVoiceAgent({
outputDeviceId: selectedSpeakerId,
curl -X POST 'https://api.cloudflare.com/client/v4/accounts//browser-rendering/snapshot' \ -H 'Authorization: Bearer ' \ -H 'Content-Type: application/json' \
"url": "https://example.com/",
"formats": ["screenshot", "markdown", "accessibilityTree"]
import Cloudflare from "cloudflare";
const client = new Cloudflare({
apiToken: process.env["CLOUDFLARE_API_TOKEN"],
const snapshot = await client.browserRendering.snapshot.create({
account_id: process.env["CLOUDFLARE_ACCOUNT_ID"],
url: "https://example.com/",
formats: ["screenshot", "markdown", "accessibilityTree"],
console.log(snapshot.markdown);
console.log(snapshot.accessibilityTree);
async fetch(request, env): Promise<Response> {
return await env.BROWSER.quickAction("snapshot", {
url: "https://example.com/",
formats: ["screenshot", "markdown", "accessibilityTree"],
} satisfies ExportedHandler<Env>;
-- Find zones that had either firewall blocks OR high-risk requests
SELECT zone_id FROM my_namespace.firewall_events WHERE action = 'block'
SELECT zone_id FROM my_namespace.http_requests WHERE risk_score > 0.8
-- Find zones with both firewall blocks AND high traffic
SELECT zone_id FROM my_namespace.firewall_events WHERE action = 'block'
SELECT zone_id FROM my_namespace.http_requests
-- Find enterprise zones that have not been compacted
SELECT zone_id FROM my_namespace.zones WHERE plan = 'enterprise'
SELECT zone_id FROM my_namespace.compaction_history
SELECT DISTINCT region, department
FROM my_namespace.sales_data
WHERE total_amount > 1000
ORDER BY region, department