What is Lightarch?
Lightarch is a cloud-native observability platform built entirely on Cloudflare's edge infrastructure. It collects, stores, and queries your application's traces, logs, and metrics — with your data stored in your own R2 bucket and Iceberg table, not a shared cloud database.
It costs 70–90% less than Datadog or New Relic because there are no egress fees: your data never leaves Cloudflare's network.
Screenshot needed
Architecture diagram: App → OTLP → Ingest Gateway → D1 (hot, 48h) + R2 Iceberg (cold, unlimited) → Query Proxy → Dashboard. Show data flow with arrows and the 7 workers.
Key concepts
DSN — Data Source Name
Your DSN (la_live_...) is a secret token that identifies your tenant when sending data to the ingest gateway. Keep it in environment variables, never commit it. You can rotate it in Settings.
Signals
Lightarch ingests three OpenTelemetry signal types:
| Signal | Endpoint | What it captures |
|---|---|---|
| Traces | /v1/traces | Distributed request spans — timing, service hops, errors |
| Logs | /v1/logs | Log records with body text, severity, attributes |
| Metrics | /v1/metrics | Gauges, counters, histograms (p50/p99 computed at ingest) |
Hot vs Cold storage
Spans and logs live in a per-tenant D1 database (SQLite at the edge) for 48 hours — fast, instantly queryable. After 48 hours they roll off D1 and land in R2 + Iceberg (your own bucket) for unlimited cold storage, still queryable via fetch or the cold path in the UI.
Architecture
Seven Cloudflare Workers power Lightarch:
| Worker | Role |
|---|---|
| eo-ingest-gateway | Receives OTLP data, verifies DSN, writes to D1 + R2 pipeline |
| eo-query-proxy | Serves dashboard queries, WebSocket live tail, alert CRUD |
| eo-orchestrator | Provisions per-tenant D1 + R2 bucket + Pipeline on signup |
| eo-dashboard-worker | Auth, team management, source maps, CLI auth |
| eo-billing-sync | Nightly D1 cleanup, usage aggregation, Lemon Squeezy webhooks |
| eo-notifier | Alert dispatch via Cloudflare Workflows + Resend email |
| eo-anomaly-detector | Z-score anomaly detection, runs every 5 minutes |
Roles & Access
| Role | Capabilities |
|---|---|
| Owner | Full access — billing, delete account, all team management |
| Admin | Settings, alerts, invite members, rotate DSN — no billing/delete |
| Member | All data access, raw SQL queries, create dashboards and alert rules |
| Viewer | Read-only — logs, traces, metrics, alerts view. No SQL, no settings |