Do not expect Cloudflare to cache HTML or JSON merely because it is proxied

Default extension-based eligibility differs from an application response's MIME type.

Resilient network core with engineered blue and gold data paths.
DSE visual intelligenceNetworks & infrastructureGuide · 2 min read
Executive summary

What you need to know

Default extension-based eligibility differs from an application response's MIME type.

Potentially affected

This concerns Cloudflare's default CDN cache behavior.

DSE recommendation

DSE recommends inventorying the actual URL shapes of static assets and application endpoints before setting performance expectations.

Default extension-based eligibility differs from an application response’s MIME type.

Source facts

Cloudflare states that its default CDN behavior determines cache eligibility by file extension rather than MIME type and does not cache HTML or JSON by default. Cache Rules can change eligibility. The guide also documents request collapsing for concurrent misses at one data center, where waiting requests share the first origin fetch for the same asset.

Source: Cloudflare — Default Cache Behavior.

Applicability

This concerns Cloudflare’s default CDN cache behavior.

DSE recommendation

DSE recommends inventorying the actual URL shapes of static assets and application endpoints before setting performance expectations. Keep authenticated HTML and user-specific JSON outside broad caching rules unless their cache-key and privacy design is deliberately reviewed. Use a clearly versioned public asset for initial acceptance rather than interpreting a dynamic page’s lack of HIT as a proxy fault. Document any explicit extensionless or HTML caching rule with its owner and intended response classes. Give the performance review an explicit list of endpoints expected to remain dynamic. Ask the reviewer to classify them before looking at hit rate, so healthy uncached application responses are not counted as failed static delivery or used to justify an indiscriminate cache-everything rule.

Verification

Inspect repeated requests for one default-eligible static asset and one ordinary HTML or JSON endpoint. Compare the resulting status with matching rules and origin headers. If testing request collapsing, use a controlled concurrent workload and origin evidence; do not claim that one observed fetch represents every data center or request pattern.

Official reference

Cloudflare — Default Cache Behavior. Reviewed October 20, 2026.

Primary reference

Review the official source

Cloudflare — Default Cache Behavior · Verified October 20, 2026

Open official reference ↗
Plan the next step

Need help applying this guidance safely?

DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.

Talk with DSE