All skills
nodnarbnitram avatar

/cloudflare-vpc-services

@1ac816c

Diagnose and create Cloudflare VPC Services for Workers to access private APIs in AWS, Azure, GCP, or on-premise networks. Use when troubleshooting dns_error, configuring cloudflared tunnels, setting up VPC service bindings, or routing Workers to internal services.

Use this Skill: https://skilld.dev/gh/nodnarbnitram/claude-code-extensions/cloudflare-vpc-services

This session only. Nothing lands on disk.

README.md

≈740 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Cloudflare VPC Services Skill

Status Version Last Updated Confidence Production Tested
Active 1.0.0 2024-11 4/5 Internal projects

What This Skill Does

  • Diagnose dns_error and connectivity issues with VPC services
  • Create VPC service configurations (IP-based and hostname-based)
  • Configure wrangler.jsonc bindings for VPC services
  • Write Worker code with service binding fetch() patterns
  • Troubleshoot tunnel and routing problems

Auto-Trigger Keywords

Primary Keywords

  • vpc service
  • cloudflared tunnel
  • service binding
  • private api access
  • workers vpc

Secondary Keywords

  • tunnel configuration
  • wrangler vpc_services
  • internal api
  • cross-cloud connectivity
  • QUIC protocol

Error Pattern Keywords

  • dns_error
  • "requests leaving vpc"
  • "connection timeout vpc"
  • "port ignored"
  • "tunnel not connecting"

Known Issues Prevention

Issue Prevention
dns_error Enforce cloudflared 2025.7.0+, QUIC protocol
Wrong routing Use internal hostnames, not public
Port confusion Document that fetch() port is ignored

When to Use

Use for:

  • Setting up new VPC service connections
  • Debugging dns_error or timeout issues
  • Configuring wrangler for VPC bindings
  • Writing Worker code that accesses private APIs
  • Troubleshooting tunnel connectivity

Don't use for:

  • General Cloudflare Workers development (use cloudflare-workers-expert)
  • Public API integrations
  • Cloudflare Access/Zero Trust setup (different use case)

Quick Usage

// Worker code with VPC service binding
export default {
  async fetch(request, env) {
    const response = await env.PRIVATE_API.fetch(
      "https://internal-api.vpc.local/users"
    );
    return response;
  }
};

Token Efficiency

Approach Tokens Time
Manual research + trial/error ~8000 45 min
With this skill ~3000 10 min
Savings ~60% 78%

File Structure

cloudflare-vpc-services/
├── SKILL.md           # Main instructions and patterns
├── README.md          # This file (discovery/metadata)
├── templates/
│   ├── wrangler-vpc.jsonc         # Ready-to-use wrangler config
│   ├── vpc-service-ip.json        # IP-based service payload
│   └── vpc-service-hostname.json  # Hostname-based service payload
├── scripts/
│   └── list-vpc-services.sh       # List services via API
└── references/
    └── api-patterns.md            # Comprehensive fetch() examples

Dependencies

Package Version Verified
wrangler latest 2024-11
cloudflared 2025.7.0+ 2024-11

Related Skills

  • cloudflare-workers-expert - General Workers development
  • cloudflare-workflows-expert - Durable execution workflows

Source: SKILL.md on GitHub

1 warning6mo4 checks · Risk SAFE
  • Gen Agent Trust Hub7mo

    The skill is a legitimate administrative tool for managing Cloudflare VPC services using the official 'wrangler' CLI. While it uses 'npx' for unversioned package execution and presents an indirect prompt injection surface through log analysis, these are standard for its intended administrative use.

  • Socket6mo

    No alerts

  • Snyk7mo

    Risk: LOW · No issues

  • Runlayer7mo

    10/10 files flagged

Signed by skilld at 1ac816c. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 months ago.

Steadyupdated 6 months ago
What it can do
Reads files Runs commands Network
All 6 allowed tools
ReadGrepGlobBashWebFetchWebSearch

README badge

README badge for nodnarbnitram/claude-code-extensions/cloudflare-vpc-services