Inside the proxy: meet FL2

FOUNDATIONCloudflare

Inside the proxy: meet FL2

What it is

Nearly every product — WAF, cache, Workers, Rules — executes inside the HTTP proxy.

FL → FL2

FL2 replaces the original Lua-on-NGINX proxy, built on Cloudflare's Oxy and Pingora frameworks.

Why it matters

Memory-safe and faster, with a modular pipeline where each product is a discrete, ordered stage.

What you get

Deterministic ordering and per-request visibility — the basis for the tracing tools later in this deck.

Cloudflare Application Performance05