Cloudflare Docs
Cloudflare Image Optimization
Cloudflare Docs
Cloudflare Image Optimization
GitHub icon
Visit Cloudflare Image Optimization on GitHub
Set theme to dark (⇧+D)
  1. Products
  2. Cloudflare Image Optimization
  3. Cloudflare Image Resizing
  4. Formats and limitations

Supported formats and limitations

​​ Supported input formats

  • JPEG
  • PNG
  • GIF (including animations)
  • WebP (no animations)
  • SVG

​​ Supported output formats

  • JPEG
  • PNG
  • GIF (including animations)
  • WebP (including animations)
  • SVG
  • AVIF

​​ Supported features

Image Resizing can:

  • Resize and generate JPEG and PNG images, and optionally AVIF or WebP.
  • Save animations as GIF or animated WebP.
  • Support ICC color profiles in JPEG and PNG images.
  • Preserve JPEG metadata (metadata of other formats is discarded).
  • Convert the first frame of GIF animations to a still image.

​​ SVG files

Cloudflare Images and Image Resizing can deliver SVG files. However, as this is an inherently scalable format, Cloudflare does not resize SVGs.

As such, Cloudflare Images variants cannot be used to resize SVG files. Variants, named or flexible, are intended to transform bitmap (raster) images into whatever size you want to serve them.

You can, nevertheless, use variants to serve SVGs, using any named variant as a placeholder to allow your image to be delivered. For example:

https://imagedelivery.net/<ACCOUNT_HASH>/<SVG_ID>/public

Cloudflare recommends you use named variants with SVG files. If you use flexible variants, all your parameters will be ignored. In either case, Cloudflare applies SVG sanitizing to your files.

You can also use Image Resizing to sanitize SVG files stored in your origin. However, as stated above, Image Resizing will ignore all transform parameters, as Cloudflare does not resize SVGs.

​​ Sanitized SVGs

Cloudflare sanitizes SVG files with svg-hush before serving them. This open-source tool developed by Cloudflare is intended to make SVGs as safe as possible. Because SVG files are XML documents, they can have links or JavaScript features that may pose a security concern. As such, svg-hush filters SVGs and removes any potential risky features, such as:

  • Scripting: Prevents SVG files from being used for cross-site scripting attacks. Although browsers do not allow scripts in the <img> tag, they do allow scripting when SVG files are opened directly as a top-level document.
  • Hyperlinks to other documents: Makes SVG files less attractive for SEO spam and phishing.
  • References to cross-origin resources: Stops third parties from tracking who is viewing the image.

SVG files can also contain embedded images in other formats, like JPEG and PNG, in the form of Data URLs. Cloudflare treats these embedded images just like other images that we process, and optimizes them too. Cloudflare does not support SVG files embedded in SVG recursively, though.

Cloudflare still uses Content Security Policy (CSP) headers to disable unwanted features, but filtering acts as a defense-in-depth in case these headers are lost (for instance, if the image was saved as a file and served elsewhere).

svg-hush is open-source. It is written in Rust and can filter SVG files in a streaming fashion without buffering, so it is fast enough for filtering on the fly.

For more information about svg-hush, refer to Cloudflare GitHub repository.

​​ Format limitations

Since some image formats require longer computational times than others, Cloudflare has to find a proper balance between the time it takes to generate an image and to transfer it over the Internet.

Resizing requests might not be fulfilled with the format the user expects due to these trade-offs Cloudflare has to make. Images differ in size, transformations, codecs and all of these different aspects influence what compression codecs are used.

Cloudflare tries to choose the requested codec, but we operate on a best-effort basis and there are limits that our system needs to follow to satisfy all customers.

AVIF encoding, in particular, can be an order of magnitude slower than encoding to other formats. Cloudflare will fall back to WebP or JPEG if the image is too large to be encoded quickly.

​​ Limits per format

Hard limits refers to the maximum image size to process. Soft limits refers to the limits existing when the system is overloaded.

File formatHard limits on the longest side (width or height)Soft limits on the longest side (width or height)
AVIF3,200 pixels640 pixels
Other12,000 pixelsN/A
WebPN/A2,560 pixels for lossy; 1920 pixels for lossless

All images have to be less than 70 MB. The maximum image area is limited to 100 megapixels (for example, 10,000 x 10,000 pixels large).

GIF animations are limited to a total of 100 megapixels (the sum of sizes of all frames). Animations that exceed this limit will be truncated. Note that GIF is an outdated format and has very inefficient compression. High-resolution animations will be slow to process and will have very large file sizes. For video clips, Cloudflare recommends using video formats like MP4 and WebM instead.