Every job your VPS does, and what Cloudflare's free plan does with it
Moving off a VPS feels like a leap of faith. Task by task — site, TLS, DNS, redirects, cron, mail, storage, small APIs — what the free plan covers and where it bites.
A blog about real work on Cloudflare's free plan — redirects, DNS, HTTP, tracking, whole domain portfolios. Where the free limits bite, and every number checked against the live documentation with the date it was checked.
Moving off a VPS feels like a leap of faith. Task by task — site, TLS, DNS, redirects, cron, mail, storage, small APIs — what the free plan covers and where it bites.
The 2026-07-28 revision made MCP stateless, and Cloudflare deprecated its Durable Object path a day earlier. We built a zero dependency server and metered it.
Years of unanswered threads, even a €100 bounty on the question. The loop that closes it: a redirect hop that mints a click_id and takes the postback.
curl shows the server hops. It cannot see a JS redirect, a meta refresh, or an HSTS upgrade, and DevTools forgets on navigation. How to capture the whole chain.
Auto-renew is a standing instruction, not a safety net: it fails on a dead card, a lost renewal email, or a domain you forgot. What actually catches an expiry.
The expired-domain redirect Google now penalizes, the consolidation it still blesses, and how to point the domains you own at one site on Cloudflare.
The zone is green and the rule is there, yet visitors get an error or the wrong page. Three ways a Cloudflare redirect quietly fails, and one curl to tell them apart.
The dashboard has no cross-domain view. One script says which of 300 domains still answer, and Ahrefs' now-free DR endpoint says which ones are worth fixing.
Cloudflare's scanner runs 21 checks. Four were worth fixing on a static docs site, and the fixes exposed two Pages traps. The rest were correct to fail.
Web Analytics, Plausible and Umami are page beacons, so a 301 is invisible to all of them. A Worker plus Analytics Engine counts it on the free plan.
Every domain is its own zone, Cloudflare throttles how fast you can add them, and presetting nameservers gets you the wrong pair. The order that works.
Single Redirects, Bulk Redirects, Snippets, Workers, _redirects and the origin, compared on scope, free plan quota, matching power and the thing that catches people out.
Google Ads flags redirects that drop click IDs and tells you to ask IT. Here is how to find the hop that drops them yourself, with curl, in about a minute.
Cloudflare's docs mark Page Rules deprecated and name a replacement for almost every setting. Five have no replacement at all, and the automatic migration drops them.
Cloudflare raised the free plan Bulk Redirects quota to 10,000 in February 2025. The rollout did not reach every account. How to check yours, and how to get it fixed.