Mar Witek, Dan Lapid, Nevi Shah, and Daniel Walsh
\nToday, we’re introducing Cloudflare Traces in open beta, extending automatic tracing beyond Workers to the rest of the request path. In one trace, you can see supported security rules, transformations, cache decisions, routing, Worker execution, and origin handling, then continue that trace through services running on Cloudflare, at your origin, or elsewhere in your stack. This is a long-term investment in OpenTelemetry and in making Cloudflare the most observable part of your stack.
\nYou can now:
\nYou can enable tracing in the Cloudflare dashboard on any domain or let your agent set up for you:
\nWhen our own teams investigate, we use our own internal traces, which often include thousands of spans for a single trace, generated by dozens of services and features. This lets us dig deep into every detail of a given request. We don’t think that visibility should stop at our internal systems. Workers Tracing was our first step toward exposing what happens on our platform. Last year, we launched automatic instrumentation for Worker invocations, including outbound fetches and calls to KV, R2, D1, Durable Objects, and other Workers. It shows the work performed inside the Workers runtime without requiring tracing code for every operation.
\nThe goal of Cloudflare Traces is to bring the same level of visibility to everyone using Cloudflare, whether you’re building on Cloudflare or just have Cloudflare in front of an origin. You get to see how your traffic moved through our platform, and connect the dots between how you’ve configured Cloudflare, and how this influences request processing time, routing decisions, and more.
\nA request’s path through Cloudflare can be complicated! It might pass through security rules, transformations, routing, caching, or proxied to another service entirely. Cloudflare Traces records each supported step as a span, including its timing, outcome, and relevant attributes. Instead of reconstructing the request from separate logs and configuration, you can see the request’s path through our system in one place.
\nYou can answer questions like:
\nSee when custom or managed rules evaluated the request, how long evaluation took, and the resulting action. Identify the rule responsible for a block or challenge through its span events.
\nYou can open the http_request_transform span to see each change, the request component it affected, and the rule responsible. You can also see where the transformation occurred relative to routing and origin handling.
The workers_routing span shows whether a route matched, which routing type was used, and the matching route pattern.
You can expand nested cache, upstream, and origin spans to see where the request spent its time. Here, you can see there was a cache miss that went to origin and spent 527ms of the 539ms getting a response.
\nThere is no special instrumentation, config, or plugins required. Once tracing is enabled for a domain, Cloudflare generates these spans automatically. This lets you extend the trace through third-party services and back again by adhering to open standards. From there, you can control which requests are traced using a baseline sampling rate and Trace Rules.
\nYou can enable tracing on any domain and set a baseline sampling rate to balance visibility, data volume, and cost. You might trace 1% of requests during normal operation, giving you a continuous view of request behavior without collecting a trace for every request.
\nTrace Rules let you keep a low baseline sampling rate while capturing complete traces for a specific investigation. If one customer reports a problem, you can trace 100% of traffic for their hostname, source IP, or identifying request header while leaving everyone else at 1%. Or during an investigation, you could trace 100% of requests carrying a temporary debug header, while leaving all other traffic at the baseline. This lets you reproduce an issue without increasing tracing across the entire domain.
\nTrace Rules use the same Cloudflare Rules language, so you can target paths, methods, headers, IP addresses, geographies, or combinations of those properties.
\nOne of the most common requests we hear is for true distributed tracing: a single trace that follows a request into Cloudflare, through our platform, and onward through the rest of your stack.
\nCloudflare Traces can accept a W3C traceparent header from an incoming request, allowing Cloudflare spans to join a trace that began before the request reached our platform. An incoming propagation policy controls whether Cloudflare accepts that context.
\nCloudflare can also forward a new traceparent header to your origin. Any other instrumented services can extract that context and continue the trace through APIs, databases, and services running on Cloudflare or elsewhere. To view everything as one connected trace, you can send both Cloudflare and application spans to the same OpenTelemetry-compatible backend.
\nYou can export Cloudflare spans over OTLP to a compatible observability platform, where they appear alongside telemetry from the rest of your stack. Configure an account-level destination, then choose which domains send traces to it. This is part of our commitment to OpenTelemetry: Cloudflare represents request activity as OpenTelemetry spans and delivers them using OTLP, keeping the data portable across observability tools.
\nWhen you ask a coding agent to debug a production issue, it might inspect your code and run tests, but it may not be able to see what happened to the request in production. With the Cloudflare Observability MCP server, your agent can leverage our SQL API to query your traces (and all of your observability data!), giving it access to your investigation production telemetry.
\nLet your agent find the right requests, comparing failed traces with successful ones, and identifying where their spans diverge. Since the agent can also inspect your repository, it can connect those findings to the relevant code, narrow down what needs to change, and help put up a fix for you to review.
\nCloudflare Traces will be a part of the unified Cloudflare Observability pricing model. Instead of charging by the number of spans/events, pricing is based on how much observability data you ingest and how long you retain it. New pricing will take effect across Cloudflare Tracing (and Workers Tracing!) starting December 1, 2026.
\n| Plan | Included Usage | Retention | Additional Usage |
|---|---|---|---|
| Free | 0.5 GB of ingestion per day | 7 Days | Not available |
| Paid and Enterprise | 50 GB of ingestion 10 GB-month of storage per billing cycle | Up to 1 year (coming soon) | $0.25 per GB ingested $0.10 per GB-month stored |
Following the open beta, we plan to launch:
\nFollow the Cloudflare Traces documentation to trace your first request and tune sampling with Trace Rules. Cloudflare Traces is available in open beta from the dashboard, through the API, or with Terraform, with support for exporting to an OTLP destination.
","headings":[{"level":1,"text":"Introducing Cloudflare Traces: follow requests through our entire platform","id":"introducing-cloudflare-traces-follow-requests-through-our-entire"},{"level":2,"text":"Giving you the visibility we use to debug Cloudflare","id":"giving-you-the-visibility-we-use-to-debug-cloudflare"},{"level":2,"text":"Follow one request end to end","id":"follow-one-request-end-to-end"},{"level":3,"text":"Why was the request blocked or challenged, and which security rule took action?","id":"why-was-the-request-blocked-or-challenged-and-which-security-rul"},{"level":3,"text":"Was the URL rewritten by a Transform Rule before it reached the application?","id":"was-the-url-rewritten-by-a-transform-rule-before-it-reached-the-"},{"level":3,"text":"Which Page Rules, Snippets, or Workers handled or changed the request?","id":"which-page-rules-snippets-or-workers-handled-or-changed-the-requ"},{"level":3,"text":"Was the response served from cache, and where was time spent between Cloudflare, the origin connection, and the application?","id":"was-the-response-served-from-cache-and-where-was-time-spent-betw"},{"level":2,"text":"Configure your tracing","id":"configure-your-tracing"},{"level":3,"text":"Set a baseline sampling rate","id":"set-a-baseline-sampling-rate"},{"level":3,"text":"Configure Trace Rules","id":"configure-trace-rules"},{"level":3,"text":"Accept and propagate trace context","id":"accept-and-propagate-trace-context"},{"level":2,"text":"Export traces to your observability platform","id":"export-traces-to-your-observability-platform"},{"level":2,"text":"Let your agent investigate Cloudflare Traces","id":"let-your-agent-investigate-cloudflare-traces"},{"level":2,"text":"Pricing","id":"pricing"},{"level":2,"text":"What's next","id":"what-s-next"},{"level":2,"text":"Get started","id":"get-started"}]}}