Skip to content
Cloudflare Docs

Product compatibility

The table below provides a summary of the Data Localization Suite product’s behavior with Cloudflare products. Refer to the table legend for guidance on interpreting the table.

✅ Product works with no caveats
🚧 Product can be used with some caveats
✘ Product cannot be used
⚫️ Not applicable

Application Performance

ProductGeo Key ManagerRegional ServicesCustomer Metadata Boundary
Caching/CDN✅✅✅
Cache Reserve⚫️🚧✅ 1
DNS⚫️⚫️🚧 2
HTTP/3 (with QUIC)⚫️✘⚫️
Image Resizing✅✘🚧 3
Load Balancing✅✅🚧 3
Onion Routing✘✘✘
Orange-to-Orange (O2O)✘✘✘
Stream Delivery✅✅✅
Tiered Caching✅🚧 4🚧 5
Trace✘✘✘
Waiting Room⚫️✅✅
Zaraz✅✅✅

Application Security

ProductGeo Key ManagerRegional ServicesCustomer Metadata Boundary
Advanced Certificate Manager⚫️⚫️⚫️
Advanced DDoS Protection✅✅🚧 6
API Shield✅✅✘ 7
Bot Management✅✅🚧 8
DNS Firewall⚫️⚫️🚧 3
Page Shield✅✅✅
Rate Limiting✅✅🚧 3
SSL✅✅✅
Cloudflare for SaaS✘✅✅
Turnstile⚫️✘✅
WAF/L7 Firewall✅✅✅
DMARC Management⚫️⚫️✅

Developer Platform

ProductGeo Key ManagerRegional ServicesCustomer Metadata Boundary
Cloudflare Images⚫️✘✘
Cloudflare Pages✘✅ 9🚧 3
Durable Objects⚫️✅ 10🚧 3
Email Routing⚫️⚫️✅
R2✅ 11✅ 12✅ 13
Stream⚫️✘✘
Workers (deployed on a Zone)✅✅🚧 3
Workers KV⚫️✘✘
Workers.dev✘✘✘

Network Services

ProductGeo Key ManagerRegional ServicesCustomer Metadata Boundary
Argo Smart Routing✅✘ 14✘ 15
Static IP/BYOIP⚫️✅ 16⚫️
Magic Firewall⚫️⚫️✅
Magic Transit⚫️⚫️🚧 3
Magic WAN⚫️⚫️✅
Spectrum✅✅✅

Platform

ProductGeo Key ManagerRegional ServicesCustomer Metadata Boundary
Logpull⚫️⚫️🚧 17
Logpush⚫️✅🚧 18

Zero Trust

ProductGeo Key ManagerRegional ServicesCustomer Metadata Boundary
Access🚧 19🚧 20🚧 21
Browser Isolation⚫️🚧 22✅
CASB⚫️⚫️✘
Cloudflare Tunnel⚫️🚧 23⚫️
DLP⚫️ 24⚫️ 24🚧 25
Gateway🚧 26🚧 27🚧 28
WARP⚫️⚫️🚧 3

Footnotes

  1. You cannot yet specify region location for object storage itself. ↩

  2. Dashboard Analytics are empty when using CMB outside the US region. Use Logpush instead. ↩

  3. Logs / Analytics not available outside US region when using Customer Metadata Boundary. ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9

  4. Regular and Custom Tiered Cache works; Smart Tiered Caching not available with Regional Services. ↩

  5. Regular/Generic and Custom Tiered Cache works; Smart Tiered Caching does not work with Customer Metadata Boundary (CMB).
    With CMB set to EU, the Zone Dashboard Caching > Tiered Cache > Smart Tiered Caching option will not populate the Dashboard Analytics. ↩

  6. Adaptive DDoS Protection is only supported for US CMB. ↩

  7. API shield will not yet work with Customer Metadata Boundary enabled outside of US region. ↩

  8. Some advanced Enterprise features, including the Anomaly Detection engine, are not available. ↩

  9. Only when using Custom Domain set to a region. ↩

  10. Jurisdiction restrictions for Durable Objects. ↩

  11. Only when using a Custom Domain and a Custom Certificate or Keyless SSL. ↩

  12. Only when using a Custom Domain set to a region and using jurisdictions with the S3 API. ↩

  13. R2 Dashboard Metrics and Analytics are populated. Additionally, Jurisdictional Restrictions guarantee objects in a bucket are stored within a specific jurisdiction. ↩

  14. Argo cannot be used with Regional Services. ↩

  15. Argo cannot be used with Customer Metadata Boundary. ↩

  16. Static IP/BYOIP can be used with the legacy Spectrum setup. ↩

  17. Logpull not available when using Customer Metadata Boundary outside US region. Logs may be stored and retrieved with Logs Engine which is adding region support in 2025. ↩

  18. Logpush available with Customer Metadata Boundary for these datasets. Contact your Customer Success Manager if you need another dataset. ↩

  19. Access App SSL keys can use Geo Key Manager. Access JWT is not yet localized. ↩

  20. Can be localized to US FedRAMP region only. More regions coming in 2024. ↩

  21. Customer Metadata Boundary can be used to limit data transfer outside region, but Access User Logs will not be available outside US region. ↩

  22. Currently may only be used with US FedRAMP region. ↩

  23. Only US FedRAMP region. ↩

  24. Uses Gateway HTTP and CASB. ↩ ↩2

  25. DLP is part of Gateway HTTP, however, DLP datasets are not available outside US region when using Customer Metadata Boundary. ↩

  26. You can bring your own certificate to Gateway but these cannot yet be restricted to a specific region. ↩

  27. Gateway HTTP supports Regional Services. Gateway DNS does not yet support regionalization.
    ICMP proxy and WARP-to-WARP proxy are not available to Regional Services users. ↩

  28. Dashboard Analytics and Logs are empty when using CMB outside the US region. Use Logpush instead. ↩

Cloudflare DashboardDiscordCommunityLearning CenterSupport Portal