R2 là gì? Lưu file trên Cloudflare mà không “sợ” phí egress What is R2? Object storage on Cloudflare without egress sticker shock What is R2? Object storage on Cloudflare without egress sticker shock

Object storage là gì — và vì sao không chỉ dùng ổ đĩa hosting? What is object storage — and why not only a hosting disk? What is object storage — and why not only a hosting disk?

Hosting truyền thống thường gắn ổ đĩa với một máy chủ: dung lượng có hạn, backup và scale khó khi traffic tăng. Object storage (như R2) lưu file dưới dạng object có key — ảnh.png, backup/2026-08.zip — trong bucket, truy cập qua API HTTP(S), scale độc lập với app server. Traditional hosting ties disk space to one server: limited capacity, harder backup and scale when traffic grows. Object storage (like R2) stores files as keyed objects — image.png, backup/2026-08.zip — in a bucket, accessed via HTTP(S) APIs, scaling separately from your app server. Traditional hosting ties disk space to one server: limited capacity, harder backup and scale when traffic grows. Object storage (like R2) stores files as keyed objects — image.png, backup/2026-08.zip — in a bucket, accessed via HTTP(S) APIs, scaling separately from your app server.

R2 tương thích API kiểu S3: nhiều công cụ và SDK quen thuộc. Khác biệt nổi bật trên blog.cloudflare.com về storage: không tính phí egress (tải dữ liệu ra) khi phục vụ qua mạng Cloudflare — tránh “hóa đơn bất ngờ” khi ảnh viral. R2 speaks S3-compatible APIs: familiar tools and SDKs. A standout difference in Cloudflare Blog storage posts: no egress fees when serving through Cloudflare’s network — avoiding “surprise bills” when an image goes viral. R2 speaks S3-compatible APIs: familiar tools and SDKs. A standout difference in Cloudflare Blog storage posts: no egress fees when serving through Cloudflare’s network — avoiding “surprise bills” when an image goes viral.

Use case điển hình: ảnh upload user, video ngắn, export backup database, static asset cho site, log archive. Không phù hợp thay database quan hệ — dùng D1 hoặc DB chuyên dụng cho dữ liệu có cấu trúc và query phức tạp. Typical uses: user uploads, short video, database backup exports, site static assets, log archives. Not a replacement for relational databases — use D1 or a dedicated DB for structured data and complex queries. Typical uses: user uploads, short video, database backup exports, site static assets, log archives. Not a replacement for relational databases — use D1 or a dedicated DB for structured data and complex queries.

Egress là gì — và R2 giúp gì cho ví tiền? What is egress — and how does R2 help your budget? What is egress — and how does R2 help your budget?

Egress là lưu lượng dữ liệu “ra khỏi” nhà cung cấp cloud khi user tải file. Một số nhà cung cấp object storage giá storage rẻ nhưng egress đắt — site càng nổi tiếng, bill càng leo. R2 được thiết kế với mô hình: trả cho storage và operation, không phạt egress qua Cloudflare. Egress is data leaving a cloud provider when users download files. Some object stores price storage cheaply but egress expensively — the more popular the site, the higher the bill. R2 is designed around paying for storage and operations, not punishing egress through Cloudflare. Egress is data leaving a cloud provider when users download files. Some object stores price storage cheaply but egress expensively — the more popular the site, the higher the bill. R2 is designed around paying for storage and operations, not punishing egress through Cloudflare.

Lưu ý thực tế: egress-free áp dụng khi bạn phục vụ qua Workers, CDN, hoặc các đường tích hợp Cloudflare — không phải “mọi cách tải từ Internet đều miễn phí mãi mãi”. Đọc pricing và docs trước khi thiết kế kiến trúc tải file trực tiếp từ R2 public bucket ra ngoài mạng CF. Reality check: zero egress applies when you serve via Workers, CDN, or Cloudflare-integrated paths — not “every possible Internet download is free forever.” Read pricing and docs before designing direct public-bucket downloads outside the CF network. Reality check: zero egress applies when you serve via Workers, CDN, or Cloudflare-integrated paths — not “every possible Internet download is free forever.” Read pricing and docs before designing direct public-bucket downloads outside the CF network.

So với giữ ảnh trên cùng VPS chạy WordPress: R2 tách storage khỏi compute — VPS restart không làm mất file; scale CDN/Worker không cần copy ảnh sang máy mới. Phù hợp lộ trình Developer Platform trên hub. Vs keeping images on the same VPS running WordPress: R2 separates storage from compute — VPS restarts do not wipe files; scaling CDN/Workers does not require copying images to new machines. Fits the Developer Platform track on this hub. Vs keeping images on the same VPS running WordPress: R2 separates storage from compute — VPS restarts do not wipe files; scaling CDN/Workers does not require copying images to new machines. Fits the Developer Platform track on this hub.

Gắn R2 với Workers — binding thay vì hard-code key Attach R2 to Workers — bindings instead of hard-coded keys Attach R2 to Workers — bindings instead of hard-coded keys

Trong wrangler.toml hoặc dashboard, bạn khai báo binding R2 (ví dụ MY_BUCKET) gắn với bucket. Worker gọi env.MY_BUCKET.put(key, file) hoặc .get(key) — credential do platform inject, không nằm trong source frontend. In wrangler.toml or the dashboard, declare an R2 binding (e.g. MY_BUCKET) tied to a bucket. The Worker calls env.MY_BUCKET.put(key, file) or .get(key) — credentials are injected by the platform, not in frontend source. In wrangler.toml or the dashboard, declare an R2 binding (e.g. MY_BUCKET) tied to a bucket. The Worker calls env.MY_BUCKET.put(key, file) or .get(key) — credentials are injected by the platform, not in frontend source.

Pattern upload an toàn: browser gửi file tới Worker (hoặc presigned URL ngắn hạn do Worker cấp) → Worker validate loại file/kích thước → put R2 → trả URL public hoặc signed. Không expose secret S3 key trong JavaScript client. Safer upload pattern: browser sends file to Worker (or a short-lived presigned URL from Worker) → Worker validates type/size → put to R2 → return public or signed URL. Never expose S3 secrets in client JavaScript. Safer upload pattern: browser sends file to Worker (or a short-lived presigned URL from Worker) → Worker validates type/size → put to R2 → return public or signed URL. Never expose S3 secrets in client JavaScript.

Kết hợp Image Resizing hoặc CDN: lưu bản gốc trên R2, phục vụ biến thể resize qua Cloudflare — giảm bandwidth và tăng tốc mobile. Bài CDN trên hub giải thích cache; R2 giải thích “file gốc nằm ở đâu”. Combine Image Resizing or CDN: store originals on R2, serve resized variants through Cloudflare — less bandwidth, faster mobile. The CDN post on this hub explains cache; R2 explains “where the original file lives.” Combine Image Resizing or CDN: store originals on R2, serve resized variants through Cloudflare — less bandwidth, faster mobile. The CDN post on this hub explains cache; R2 explains “where the original file lives.”

Pages có thể đọc static từ build output; R2 cho nội dung động user tạo. Nhiều app full-stack: Pages UI + Worker API + R2 storage — xem diagram fullstack trên hub. Pages can serve static build output; R2 holds dynamic user-generated content. Many full-stack apps: Pages UI + Worker API + R2 storage — see the fullstack diagram on this hub. Pages can serve static build output; R2 holds dynamic user-generated content. Many full-stack apps: Pages UI + Worker API + R2 storage — see the fullstack diagram on this hub.

Bắt đầu tuần đầu — và lỗi thường gặp Your first week — and common mistakes Your first week — and common mistakes

Tuần 1: tạo bucket test; upload vài file qua dashboard hoặc wrangler; viết Worker GET trả một object; thử public access vs private + signed URL. Đọc docs lifecycle nếu cần xóa log cũ tự động. Week 1: create a test bucket; upload files via dashboard or wrangler; write a GET Worker returning one object; try public access vs private plus signed URLs. Read lifecycle docs if you need automatic old-log deletion. Week 1: create a test bucket; upload files via dashboard or wrangler; write a GET Worker returning one object; try public access vs private plus signed URLs. Read lifecycle docs if you need automatic old-log deletion.

Lỗi phổ biến: bucket public toàn bộ — lộ file nhạy cảm; không giới hạn kích thước upload — bị spam; quên CORS khi frontend gọi trực tiếp; nhầm R2 thay SQL. Sao lưu: R2 không thay chiến lược backup ứng dụng — vẫn cần versioning hoặc export định kỳ. Common mistakes: fully public buckets leaking sensitive files; no upload size limits — spam abuse; missing CORS for direct frontend calls; treating R2 as SQL. Backups: R2 does not replace app backup strategy — still version or export on a schedule. Common mistakes: fully public buckets leaking sensitive files; no upload size limits — spam abuse; missing CORS for direct frontend calls; treating R2 as SQL. Backups: R2 does not replace app backup strategy — still version or export on a schedule.

Tiếp theo: bài Pages vs Workers, Developer Platform overview, use case build serverless app. Một demo upload avatar nhỏ học R2 nhanh hơn đọc mười trang pricing. Next: Pages vs Workers post, Developer Platform overview, build-serverless-app use case. A tiny avatar-upload demo teaches R2 faster than ten pages of pricing. Next: Pages vs Workers post, Developer Platform overview, build-serverless-app use case. A tiny avatar-upload demo teaches R2 faster than ten pages of pricing.

Học tiếp trên hub (on-page backlinks) Keep learning on this hub (on-page links) Keep learning on this hub (on-page links)

• Workers (trang sản phẩm) Workers (product page) Workers (product page)
• Lộ trình Developer Platform Developer Platform track Developer Platform track
• Use case: app serverless Use case: build serverless app Use case: build serverless app
• Content Delivery trên hub Content Delivery on this hub Content Delivery on this hub
• Cloudflare 101 Cloudflare 101 Cloudflare 101
• Sản phẩm: R2 Product: R2 Product: R2

Nguồn tham khảo (blog.cloudflare.com) Sources (blog.cloudflare.com) Sources (blog.cloudflare.com)

Nội dung được viết lại để dễ hiểu hơn; luôn đọc bài gốc trên blog.cloudflare.com và docs chính thức khi cần chi tiết kỹ thuật hoặc cập nhật mới nhất. Content is rewritten for clarity; always read the original posts on blog.cloudflare.com and official docs for technical detail or the latest updates. Content is rewritten for clarity; always read the original posts on blog.cloudflare.com and official docs for technical detail or the latest updates.

• The Cloudflare Blog — R2 topics ↗
• The Cloudflare Blog — Storage topics ↗