The Relative Cost of Bandwidth Around the World
08/26/2014
Over the last few months, there’s been increased attention on networks and how they interconnect. CloudFlare runs a large network that interconnects with many others around the world. ...
Google Now Factoring HTTPS Support Into Ranking; CloudFlare On Track to Make it Free and Easy
08/06/2014
As of today, there are only about 2 million websites that support HTTPS. That's a shamefully low number. Two things are about to happen that we at CloudFlare are hopeful will begin to change that and make everyone love locks (at least on the web!)....
CloudFlare Now Supports WebSockets
08/05/2014
I'm pleased to announce that CloudFlare now supports WebSockets. The ability to protect and accelerate WebSockets has been one of our most requested features....
CloudFlare Acquires CryptoSeal
06/18/2014
We're excited to announce that CloudFlare has acquired the Trusted Computing and virtual private network (VPN) as a service company CryptoSeal. ...
Protecting Free Expression Online
06/12/2014
Over the last few years, we’ve witnessed a troubling trend: an increasing number of politically or artistically important sites targeted by very large denial of service attacks. ...
Eliminating the last reasons to not enable IPv6
06/05/2014
Today is June 6. For the last two years, the date has been celebrated as World IPv6 Day. CloudFlare has offered full IPv6 support as well as our IPv6-to-IPv4 gateway since 2012....
CloudFlare is PCI Certified
06/04/2014
Great news for everyone using CloudFlare on an e-commerce site, or a site accepting or processing credit card transactions. After undergoing a Payment Card Industry (PCI) Data Security Standard (DSS) 2.0 security control assessment, we’ve been certified as a Level 1 service provider....
The Hidden Costs of Heartbleed
04/17/2014
A quick followup to our last blog post on our decision to reissue and revoke all of CloudFlare's customers' SSL certificates. One question we've received is why we didn't just reissue and revoke all SSL certificates as soon as we got word about the Heartbleed vulnerability?...
Introducing CNAME Flattening: RFC-Compliant CNAMEs at a Domain's Root
04/03/2014
This post is about a new feature we've been quietly rolling out over the last few months. Last week we began enabling it for everyone by default. ...
Cloudflare Acquires StopTheHacker
02/24/2014
We're excited to announce that Cloudflare has acquired the anti-malware firm StopTheHacker. I wanted to share a little bit about the rationale behind the acquisition and what to expect from the two teamed up companies going forward....
Technical Details Behind a 400Gbps NTP Amplification DDoS Attack
02/13/2014
On Monday we mitigated a large DDoS that targeted one of our customers. The attack peaked just shy of 400Gbps. We've seen a handful of other attacks at this scale, but this is the largest attack we've seen that uses NTP amplification....
2013: Rebuild the Engine; 2014: Step on the Gas
12/31/2013
It's been a busy 2013 here at CloudFlare. By all external measures it was a terrific year. We grew page views, revenue and traffic across our network – all by more than 400%. We added terrific partners and high profile customers. ...
Cloudflare: Happy 3rd Birthday
09/27/2013
Today is CloudFlare's birthday. We opened to the public exactly three years ago today, September 27, 2010. In those three years we've grown to power more than 1.5 million websites and sit in front of more than 4% of all web requests....
Details Behind Today's Internet Hacks
08/27/2013
At 1:19pm (PDT) today, a researcher noticed that the New York Times' website wasn't loading. We know the New York Times tech team, so we sent an email to check in. A few minutes later, the CTO of the NYT called us back. ...
The story of a little DNS easter egg
08/27/2013
About a year ago, we realized that CloudFlare's current DNS infrastructure had some challenges. We were using PowerDNS, an open source DNS server that is popular with hosting providers. ...
Heuristics and Rules: Why We Built a New Old WAF
08/19/2013
We just rolled out an update to CloudFlare's Web Application Firewall (WAF). Previously, CloudFlare's WAF has received criticism from people who have tested it and found that it didn't behave as traditional WAFs are expected to. ...
Cloudflare and Free Speech
08/09/2013
This question assumes the answer. A website is speech. It is not a bomb. There is no imminent danger it creates and no provider has an affirmative obligation to monitor and make determinations about the theoretically harmful nature of speech a site may contain....
What's the story behind the names of CloudFlare's name servers?
08/06/2013
We're going to do a series of blog posts about some of the inner workings of CloudFlare. One of the questions we get often is what the names of our name servers mean. Here's the story....
A Tour Inside CloudFlare's Latest Generation Servers
07/22/2013
CloudFlare operates at a significant scale, handling more than a trillion requests through our network every month. ...
Government Surveillance: Why Transparency Matters
07/18/2013
The web is one of the greatest inventions of human history because it has made the world more transparent. Fundamentally, that's what the web does: it takes information that was inaccessible and opaque and makes it available and lucid....