Cloudflare Workers integration is now possible

alexbevi · 2023-11-06T20:46:01.681Z

We are working with Cloudflare on this still, however at the moment we are blocked as Atlas requires TLS for all connections, however Cloudflare Workers only supports mTLS at the moment (and TLS cannot be disabled in Altas).

Alex_Bjorlig · 2023-11-16T22:10:17.125Z

Thanks for providing an update
And is it completely unrealistic that Atlas could support mTLS somehow? Or is there another way to workaround this issue?

alexbevi · 2023-11-28T15:06:29.297Z

@Alex_Bjorlig the challenge for the moment is that with only mTLS available we cannot provide our own TLS certificate/key to the socket layer. This prevents us from being able to support connections to MongoDB Atlas clusters.

We’ll continue to work with Cloudflare on proper TLS support though, and share updates as they become available.

Alex_Bjorlig · 2024-01-09T08:51:07.327Z

Hi @alexbevi - I hope you had a great New Year

Do you think it’s realistic that some progress will happen on this TLS topic, or is it better that we start looking for a different solution?

alexbevi · 2024-01-09T22:03:56.501Z

Unfortunately I’m waiting for further info regarding Cloudflare’s roadmap for their Workers product. Once I know more we can schedule work on our end accordingly and share this out more broadly, but for now there’s been no further progress.

Nick_James · 2024-02-10T06:13:49.544Z

Hoping Cloudflare gets back to you soon I’m also really looking forward to using Mongodb with Cloudflare workers.

HelloImAlastair · 2024-02-11T13:40:15.633Z

@alexbevi just to check, does the Mongo Driver require some special variant of TLS? You should be able to enable regular TLS via the socket API like so:

const socket = connect("atlas.mongodb.com:27017", {
	secureTransport: "on" 
});

I know that URL/Port combo probably isn’t right, but you get the gist.
Documentation

alexbevi · 2024-02-12T15:35:07.597Z

Thanks for the feedback @HelloImAlastair, but the challenge we’re facing is that Cloudflare only supports Client authentication with mTLS - not TLS. Without the ability for Cloudflare Workers to provide client CA access within the Worker runtime we cannot provide secure connections to MongoDB Atlas from this environment.

valuein · 2024-04-25T07:02:22.228Z

Hi @alexbevi - I just got the error below which let me find this threat, and I was wondering if you had an update from Cloudflare, Nodejs, or MongoDB. Thanks!

[info] [nitro] Building Nuxt Nitro server (preset: cloudflare-pages)
[error] [nitro] Error: Cannot resolve “@aws-sdk/credential-providers” from “/opt/buildhome/repo/node_modules/.pnpm/mongodb@6.5.0/node_modules/mongodb/lib/deps.js” and externals are not allowed!

alexbevi · 2024-04-25T17:57:35.276Z

Hey @valuein,

Unfortunately nothing has changed. Cloudflare has assured us that this is a priority, but we don’t have a timeline from them as to when this will be available.

valuein · 2024-04-27T06:38:21.617Z

Let’s hope for the best then.
Any workaround for this issue in the meantime?

alexbevi · 2024-05-03T10:48:25.822Z

Until Cloudflare adds native support for TLS to their workers the workaround is to leverage MongoDB’s Data API instead (see Create a REST API with Cloudflare Workers and MongoDB Atlas | MongoDB for an example of this)

BlindChicken · 2024-05-13T07:11:14.704Z

You can also do this using a service binding with an RPC worker. One would still use Realm, but instead of making calls to the database via REST/http requests one can call methods directly from main app. It is explained in this blog post from Cloudflare.
We've added JavaScript-native RPC to Cloudflare Workers.
I build a test app based on todo-list example in the REST-API, I could share the code if anyone is interested.

Rishi_uttam · 2024-09-04T00:57:29.624Z

Hi MongoDB @BlindChicken, Please do share the code to connect to mongodb using cf workers.

I have been using the data api, and while it works with workers, the limitations such as the inability to perform simple queries such as findOneAndUpdate and the 2000 ms connection time is greatly limiting our decision to use Mongodb in future projects.

Even using serverless database option provided by cf, i belive the nodes are not distributed globally is that right?

Really looking to speed up Data API access or finding a driver that would work with cf workers. – your update would be appreciated.

Rishi_uttam · 2024-09-10T15:40:45.553Z

Now that MongoDB has suddenly deprecated Realm Sync and the DataAPI this leaves us in the dust. What are the alternatives? We may be switching over to cloudflare D1 or using hyperdrive with postgres to solve our solution. MongoDB please update the driver to support cloudflare workers.

Adam_Jeffries · 2024-09-11T11:41:22.187Z

This workaround is no longer viable with the Data API deprecation. Hopefully someone at Mongo can put a little pressure on Cloudflare to add TLS worker support.

Rishi_uttam · 2024-09-11T15:01:08.963Z

Some good news Cloudflare seems to have solved it for us, I am yet to test it, but looks like the native mongodb driver now works with workers.

The Cloudflare Blog – 9 Sep 24

More NPM packages on Cloudflare Workers: Combining polyfills and native code...

Workers now supports more NPM packages and Node.js APIs using an overhauled hybrid compatibility layer.

alexbevi · 2024-09-11T19:43:38.465Z

@Rishi_uttam TL;DR - you still can’t use MongoDB’s Node.js driver from Cloudflare Workers even after their latest round of updates.

I’ve written this up in a bit more detail at Why Cloudflare Workers Don't Work With MongoDB | ALEX BEVILACQUA, but it seems like we’re still not quite there.

Rishi_uttam · 2024-09-12T00:36:30.034Z

Excellant write up, and you also addressed previous MongoDB blog posts that are now invalidted due to the deprecation.

If would be amazing if you can report this to the issues channel on github as advised in the blog post here: Sign in to GitHub · GitHub

Hopefully someone would look at it and atleast remove mongodb from the post so as to not confuse the rest of us.

I am now going to look in to neurelo but another monthly fee just to get this all working seems very hacky right now. Last option is to try realm-web which I have used in production before, however its as slow as the old data api, but does allow me to bypass server side and write the connection script on the front end (with the added load of 200kb for real-web js) Wait has realm-web been deprecated too?! nothing is very clear at this point.

Thanks

alexbevi · 2024-09-12T01:09:01.137Z

There are some community solutions cropping up for the Data API (see discussion at Data API and HTTPS Endpoints are Deprecated? - #14 by Sven_Glockner).

I haven’t validated any of these personally, but there would definitely be options to explore that don’t require a subscription.

If would be amazing if you can report this to the issues channel on github as advised in the blog post here: Sign in to GitHub · GitHub

I’ve opened 🐛 BUG: `mongodb` can be imported but not successfully used with nodejs_compat_v2 · Issue #6684 · cloudflare/workers-sdk · GitHub to continue tracking this issue.