Elephants in tunnels: how Hyperdrive connects to databases inside your VPC networks

Cloudflare explains how Hyperdrive now routes PostgreSQL traffic from Workers over Cloudflare Tunnels, using a custom Rust-based Postgres protocol implementation over WebSocket to keep connections warm, reduce latency, and avoid exposing databases to the public Internet; the approach leverages generic AsyncRead/AsyncWrite traits, TLS, and Zero Trust Access service tokens for authorization, and has already been adopted by internal teams to securely access centralized databases from Cloudflare’s global network.