It's assumed that the "external storage backend" is Google Cloud Storage, since they also use it for Durable Objects storage: https://youtu.be/C5-741uQPVU?si=yOX-6gRzTbIhh34h&t=1725 (this video is worth the watch on their neat arch for Durable Objects SQLite)
Similarly, their data subprocessors lists Google for the developer platform platform: https://www.cloudflare.com/gdpr/subprocessors/cloudflare-ser...
And aligns with the Google Cloud Storage incident: https://status.cloud.google.com/incidents/ow5i3PPK96RduMcb1S...
And then, assuming, between GCP and Cloudflare being down, the rest of the dominos fall.
Is this directionally accurate? What’s wrong or missing?
> Workers KV is built as what we call a “coreless” service which means there should be no single point of failure as the service runs independently in each of our locations worldwide. However, Workers KV today relies on a central data store to provide a source of truth for data.
Honestly the blog post overall makes me think that all KV data is just stored on GCS. Not once do they refer to the GCP store as "metadata" or anything like that.
fastest963•19h ago
Separately, their dependence on their own products results in a SPOF where now, theoretically, if B2 goes down so does over half of Cloudflare's product suite. Ideally those outages can be limited to a single region at a time but that's still a massive blast radius from a single service. I completely understand them not wanting to invest in competing products as a form of redundancy though.
peq42•18h ago
Manouchehri•14h ago
https://www.cloudflare.com/gdpr/subprocessors/cloudflare-ser...
cherioo•14h ago
fastest963•9h ago