Skip to content

SYSTEM Cited by 1 source

Cloudflare MoQ relay network

Cloudflare's MoQ relay network runs the MoQ Transport protocol on every server across 330+ cities. First launched in 2025 as an unauthenticated open-preview endpoint for protocol testing (~1,000 unique daily clients), it gained authenticated isolated relay provisioning via a control-plane API in July 2026.

Architecture

Provisioning a relay does not start a VM, container, or dedicated process. Instead, it creates an isolated scope across the existing global network (see concepts/relay-as-isolated-scope). The scope separates namespaces, tracks, and objects from those belonging to other relays, and defines who can enter and what operations they can perform.

Clients connect to the anycast endpoint; Cloudflare handles routing across the network. This is analogous to adding a virtual host rather than starting a new web server (see patterns/virtual-host-style-relay-provisioning).

Provisioning API

Two resource types: - Relay — the isolated scope; one application's streams never mix with another's. - Token — a credential granting publish, subscribe, or both operations on a single relay. Independently expirable and revocable (see patterns/scoped-token-per-operation).

Single API call to create: 

POST /client/v4/accounts/$ACCOUNT_ID/moq/relays

Protocol support

  • draft-14 (open preview, unauthenticated)
  • draft-16 (authenticated, supports PUBLISH and SUBSCRIBE_NAMESPACE)

Status

Free during beta. Available via API and Cloudflare dashboard.

Seen in

Last updated · 606 distilled / 1,847 read