Freedom251 › Container Registries
Cloudflare Serverless Registry
What Cloudflare Serverless Registry is
Cloudflare Serverless Registry is a container registry implementation that runs in Cloudflare Workers and uses R2 to store images. It supports pushing and pulling container images, including Docker login, push, and pull workflows. Authentication options are username and password or public-key JWT. If an image is not in the R2 bucket, the registry can retrieve it from another registry and save it in R2 for future pulls; fallback pulls support Basic and Bearer authentication. Deployment uses a Cloudflare Worker and R2 bucket configured with Wrangler, and registry passwords and tokens should be stored as Wrangler secrets. The registry is free, with no separate price listed, though R2 usage may incur charges beyond its monthly no-charge allowance of 10 GB-month of Standard storage, 1 million Class A requests, and 10 million Class B requests. Docker pushes are limited to layers no larger than 500MB. JWTs have no per-account or per-repository scope, so verified tokens apply across the registry.
Who it suits
It suits users who want a Cloudflare Workers-based registry for Docker image workflows and can manage deployment with Wrangler. Users should be comfortable with registry-wide JWT permissions and the stated push-layer limit.
What it does well
- Supports image push and pull workflows.
- Can cache fallback images in R2.
- Supports username/password and public-key JWT authentication.
- Includes a monthly no-charge R2 allowance.
What to know first
- Docker image layers cannot exceed 500MB.
- JWT tokens are not scoped by account or repository.
- R2 charges may apply beyond the included allowance.
- pnpm is the only supported package manager.
Limits
The registry has no separate price listed. R2 includes 10 GB-month of Standard storage, 1 million Class A requests and 10 million Class B requests each month at no charge; additional Standard storage costs $0.015 / GB-month, Class A Operations cost $4.50 / million requests and Class B Operations cost $0.36 / million requests. Docker pushes are limited to images with layers of 500MB or less.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Cloudflare R2 usage-based charges | Monthly based on storage and operations; the registry itself has no separate price listed. · R2 Standard storage: $0.015 / GB-month · Class A Operations: $4.50 / million requests · Class B Operations: $0.36 / million requests · 10 GB-month, 1 million Class A requests, and 10 million Class B requests free each month | On request |
As github.com lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Open the project repository.
- Configure a Cloudflare Worker and R2 bucket using Wrangler.
- Store registry passwords and tokens as Wrangler secrets.
- Use Docker login, push and pull with the registry.
Verdict
Cloudflare Serverless Registry provides image storage and transfer through Workers and R2, with fallback retrieval from another registry. Check the push limit, registry-wide JWT permissions, and potential R2 usage charges against your requirements.
Questions
Is Cloudflare Serverless Registry free?
The registry project is free and has no separate price listed. Cloudflare R2 has monthly no-charge allowances, with usage-based charges beyond them.
What are the R2 usage rates?
Standard storage costs $0.015 / GB-month, Class A Operations cost $4.50 / million requests and Class B Operations cost $0.36 / million requests. R2 includes 10 GB-month of Standard storage, 1 million Class A requests and 10 million Class B requests each month at no charge.
How do I deploy it?
The deployment instructions configure a Cloudflare Worker and R2 bucket using Wrangler. The README directs users to store passwords and tokens as Wrangler secrets.
What authentication does it support?
It supports username/password and public-key JWT authentication. Pull fallback supports Basic and Bearer authentication.
What are the push size limits?
Docker pushes are limited to images whose layers are at most 500MB.
What license does it use?
The repository is licensed under Apache License 2.0.
Facts from Cloudflare Serverless Registry's own pages
- Authentication
- It supports username/password and public-key JWT authentication. · github.com, 4 Oct 2026
- Credential handling
- The README directs users to store registry passwords and tokens as Wrangler secrets rather than in the Wrangler configuration file. · github.com, 4 Oct 2026
- Dependency support
- The README says pnpm is the only supported package manager, though other package managers may work. · github.com, 4 Oct 2026
- Deployment
- The deployment instructions configure a Cloudflare Worker and an R2 bucket using Wrangler. · github.com, 4 Oct 2026
- Docker
- The README shows using Docker login, push, and pull with the registry. · github.com, 4 Oct 2026
- Fallback authentication
- Pull fallback supports Basic and Bearer authentication. · github.com, 4 Oct 2026
- Founded
- 2009 · github.com, 28 Sept 2026
- Free R2 allowance
- Cloudflare R2 includes 10 GB-month of Standard storage, 1 million Class A requests, and 10 million Class B requests each month at no charge. · developers.cloudflare.com, 4 Oct 2026
- Headquarters
- San Francisco, CA · github.com, 28 Sept 2026
- JWT scope
- The README says JWT tokens have no per-account or per-repository scoping, and a verified token grants its capabilities across the whole registry. · github.com, 4 Oct 2026
- License
- The repository is licensed under the Apache License 2.0. · github.com, 4 Oct 2026
- Purpose
- The project provides a container registry implementation in Cloudflare Workers backed by R2. · github.com, 4 Oct 2026
- Push and pull
- It supports container image pushing and pulling workflows. · github.com, 4 Oct 2026
- Push size limit
- Docker pushes are limited to images whose layers are at most 500MB, with the README referring to Workers plan request body limits. · github.com, 4 Oct 2026
- Registry fallback
- It can fetch images missing from its R2 bucket from another registry and copy them into R2 for later pulls. · github.com, 4 Oct 2026
- Security reporting
- The repository security policy directs vulnerability reports to Cloudflare's disclosure program or [email protected]. · github.com, 4 Oct 2026
Where Cloudflare Serverless Registry stands on Freedom251
- Container Registries#3 of 60