Cloudflare opens up the edge while Vercel floods the gateway with models

The edge gets roomier and more familiar

The headline change this week is that Workers deploys are no longer gated on compressed bundle size — the old 3 MB free / 10 MB paid limits are gone, replaced by a single 64 MiB uncompressed limit across every plan. For anyone who has ever trimmed a dependency tree to squeak under a compression ratio, that's a meaningful unlock: heavier frameworks and larger libraries now fit, and wrangler deploy --dry-run will tell you where you stand.

Python developers got the other big one: Python Workers now support WSGI and ASGI frameworks, which means Django, Flask, FastAPI, and Starlette run on the platform through wsgi or asgi entrypoints, with WorkerEntrypoint available when you want finer control. Combined with D1's new enforcement of free-tier daily row read/write limits — queries now fail until midnight UTC once you exceed them — the platform is simultaneously widening what you can build and tightening what you can spend.

Positive security and sharper rules

Cloudflare's WAF took a conceptual step with Application Profiles, a positive-security layer that learns what valid requests to your app actually look like — path variables, query params, headers, cookies, JSON and form bodies — and flags traffic that deviates, without blocking it. Schema Profiles are live for API Security customers and in closed beta for invited enterprises. Alongside it, the managed ruleset gained SQLi detection for WHERE comparisons combined with WITH clauses, moving from Log to Block.

Configuration without the support ticket

A clear theme in Cloudflare's platform work: things that used to require an account team are becoming dashboard settings. Enterprise customers can now self-serve CDN upload limits up to 5 GB from the Network page, and Tunnel and Mesh routes can be created in bulk with comma-separated destinations and per-failure retries instead of one submission at a time. Cloudflare One Appliance picked up dashboard-defined custom applications for breakout and prioritized traffic and dashboard configuration for custom DHCP options, closing gaps that previously required the API or Terraform.

Gateway catalog and SDK plumbing

Vercel's AI Gateway had a busy week adding providers behind a single key: OpenAI's GPT 6 Astra, Meta's Muse Spark 1.3, Google's Gemini 3.8 Flash, Alibaba's Qwen 3.8 Max 0902, and Anthropic's Claude Fable 5.1, plus GLM-5.3 at half price through September 7. The AI SDK mirrored that breadth with a coordinated file-operations overhaul: OpenAI file uploads gained streaming and metadata, xAI got the same treatment with upload TTLs, and the core FilesV4 interface extended to match. Less glamorous but welcome: Basic build machines give Pro and Enterprise a cheaper 2 vCPU option, and Next.js canaries turned on adapter route collapses by default while fixing Turbopack CSS sourcemaps and dev-overlay route info.