Add support for WVPC TCP services, and using them as Hyperdrive origins#12874
Merged
petebacondarwin merged 7 commits intocloudflare:mainfrom Mar 26, 2026
Merged
Conversation
🦋 Changeset detectedLatest commit: 100cf28 The changes in this PR will be included in the next version bump. Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
Contributor
|
Codeowners approval required for this PR:
Show detailed file reviewers
|
create-cloudflare
@cloudflare/kv-asset-handler
miniflare
@cloudflare/pages-shared
@cloudflare/unenv-preset
@cloudflare/vite-plugin
@cloudflare/vitest-pool-workers
@cloudflare/workers-editor-shared
wrangler
commit: |
penalosa
force-pushed
the
malonso/wvpc-tcp-hyperdrive
branch
from
4e70637 to
86d3d84
Compare
Contributor
|
Codeowners approval required for this PR:
Show detailed file reviewers
|
penalosa
reviewed
Mar 18, 2026
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
This comment was marked as resolved.
This comment was marked as resolved.
Sorry, something went wrong.
xortive
force-pushed
the
malonso/wvpc-tcp-hyperdrive
branch
from
86d3d84 to
3ab6d8e
Compare
Contributor
|
Codeowners approval required for this PR:
Show detailed file reviewers |
xortive
force-pushed
the
malonso/wvpc-tcp-hyperdrive
branch
from
4868d50 to
89da13c
Compare
This comment was marked as resolved.
This comment was marked as resolved.
Sorry, something went wrong.
xortive
force-pushed
the
malonso/wvpc-tcp-hyperdrive
branch
2 times, most recently
from
7d0baba to
86878c7
Compare
Add support for creating TCP services in Workers VPC using the `--type tcp` option. This enables exposing TCP-based services like PostgreSQL, MySQL, and other database servers through Workers VPC. Changes: - Add ServiceType.Tcp enum value and --tcp-port CLI option - Add validation requiring --tcp-port for TCP service type - Update create/update/get commands to display TCP port - Update list command to show TCP port in table (TCP:<port>) - Add comprehensive tests for TCP service CRUD operations
Add support for connecting Hyperdrive configs to databases through Workers VPC services using the `--service-id` option. This enables Hyperdrive to connect to databases hosted in private networks that are accessible through Workers VPC TCP services. Changes: - Add --service-id CLI option for hyperdrive create/update commands - Add NetworkOriginVpcService type for VPC service connections - Add conflict validation between --service-id and other origin options - Update mock API handlers to support service_id in origin - Add comprehensive tests including error case coverage
… helper Extract duplicated service detail display logic from create.ts, update.ts, and get.ts into a shared displayServiceDetails() function in shared.ts. Also adds missing null guard for tcp_port, consistent with get.ts and formatServiceForTable.
Support specifying an application protocol (postgresql or mysql) when creating or updating TCP VPC services. The protocol is displayed in service details and appended to the ports column in list tables.
xortive
force-pushed
the
malonso/wvpc-tcp-hyperdrive
branch
from
86878c7 to
9fb9937
Compare
This comment was marked as resolved.
This comment was marked as resolved.
Sorry, something went wrong.
Add TLS certificate verification mode configuration to wrangler vpc service create/update commands. This maps to the new tls_settings field on the connectivity directory API, allowing users to control how the connection to the origin verifies TLS certificates. Available modes: verify_full (default), verify_ca, disabled. Applies to both TCP and HTTP VPC service types.
xortive
force-pushed
the
malonso/wvpc-tcp-hyperdrive
branch
from
8eb487b to
b41fb17
Compare
petebacondarwin
approved these changes
Mar 25, 2026
For TCP services, allow specifying the port as part of the hostname (e.g. --hostname db.internal:5432) instead of requiring a separate --tcp-port flag. Uses the URL class for reliable host:port parsing. Also refactors command handlers to use a shared toServiceArgs() helper, eliminating duplicated args-object construction between validateArgs and handler.
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes WVPC-145
Adds support for WVPC TCP services, and using them as Hyperdrive origins---
A picture of a cute animal (not mandatory, but encouraged)