Hosting and infrastructure

Supabase, Cloudflare, Vercel and the runtimes under a SaaS. These notes cover what each one costs as the product grows, where each one wins, and when to move.

12 articles

Start here

Three storage tiles: one lit with free lines fanning out, one inside a closed panel with one clean exit, one ringed by many small service tiles with toll marks on its outgoing lines

Infra

Cloudflare R2 vs Supabase Storage vs S3 (2026): which to pick

Cloudflare R2 charges zero egress, Supabase Storage hides the wiring, S3 owns the ecosystem. How to pick object storage for a 2026 SaaS without overpaying.

Left, one large dark tile with long lines reaching it from dots at the edges; right, a spread of small white tiles each with dots close beside it

Infra

Cloudflare Workers AI vs the OpenAI API: where each wins

Workers AI bills $0.011 per 1,000 Neurons and runs on GPUs in over 180 cities. Here is where that beats a hosted API, and where it does not.

Left, eight short white bars racing to a finish line with fading trails; right, one lit tile with steady streams of dots flowing through it

Web

Bun vs Node in 2026: where each runtime wins in production

Bun 1.3 ships a full-stack runtime, Node 24 ships stable TypeScript and a test runner. We run Bun for installs and tests, Node for what serves traffic.

Many request lines converging on one lit gateway panel with a loop, a capped meter and a fork inside, then routed to three of twenty-four provider tiles

Infra

Cloudflare AI Gateway: caching, spend caps, dynamic routing

One URL in front of 24 native providers, with per-model cost logs, dollar spend caps and a cache you set from 60 seconds to a month. Core features are free.

Sixty dim tiles in a wide grid on the left, and nine lit tiles packed into a container inside a small server panel on the right

Infra

Vercel vs Docker for Next.js: a $600 bill down to $90

A $600 Vercel bill drops to about $90 a month on a managed VPS with Docker. What you give up in edge, scaling and DX, and when the swap pays off.

A chart of two lines, one steep and grey, one nearly flat and white, crossing at a ringed point, the widening wedge between them after it filled in white

Infra

Cloudflare R2 vs Supabase Storage: when to add R2 in 2026

You already run Supabase. Its Storage egress runs $0.03 to $0.09 per GB, R2 charges zero. Here is the line where adding Cloudflare R2 pays off in 2026.

Five lanes of small shapes, a gate, a key, a loop, a lock and a line of tiles, all flowing into a stack of three lit slabs on the right

Infra

Upstash Redis: 5 patterns for rate limiting, sessions, locks

Five production Upstash Redis patterns: rate limiting, sessions, cache-aside, distributed locks, and QStash queues, each with real cost math.

A dense cloud of grey dots whose many lines narrow into a slim panel with six lit slots, six white lines leaving it for a lit database cylinder

Infra

Supabase Supavisor: transaction mode, port 6543, 80ms cost

Transaction mode on port 6543 pools thousands of serverless connections, drops prepared statements and adds 30 to 80ms. When each mode is the right call.

Seven long dark tracks of eleven units, each with a small dot per unit, and on each only the first unit lit in white

Infra

Supabase RLS performance: 7 fixes for the 11x slowdown

Wrapping auth.uid() in a SELECT makes it run once per statement instead of once per row. Seven Supabase RLS patterns that stay fast on big tables.

A thin upper lane of small tiles with a dashed empty outline in it, a curved arrow down to the same tile lit on a wide lower lane carrying a block of packages and a long bar

Web

Edge runtime vs Node runtime: Next.js 16 moved the default

Next.js 16 moved middleware to the Node runtime and renamed it proxy.ts. Where Edge still wins on latency, where Node wins on packages and long tasks.

Nine lanes of dots running into a vertical wall; seven stop against it, two pass through lit openings as white arrows into a page on the right

Infra

Cloudflare AI crawler allow list: GPTBot and ClaudeBot

Cloudflare blocks AI crawlers on new domains by default. The WAF rule, the robots.txt, and the checks that keep GPTBot and ClaudeBot reading your pages.

A dark app window with a lit port on its right edge; a line from it passes a lit lock, with a stack of pills hung below, to a large lit tile; four dashed branches end in hollow rings

Next.js MCP server: mcp-handler, OAuth 2.1, Redis sessions

Mount an MCP server on a live Next.js 16 SaaS with mcp-handler: the dynamic transport route, OAuth 2.1, Redis session state, and 4 failure modes.

Back to Field notes