Good Web Security News: Open DNS Resolvers Are Getting Closed
2013-02-22
This has been a rough week in the security industry with big attacks and compromises reported at companies from Facebook to Apple. ...
When the Attackers Name Malware After You, You Know You're Doing Something Right
2013-02-14
CloudFlare's I'm Under Attack Mode (IUAM) is elegantly simple. When a site is under an application layer (Layer 7) distributed denial of service (DDoS) attack, the mode will return a challenge page to a visitor. ...
Facebook Bug Redirects the Web Through Javascript Widget Error
2013-02-08
You may have heard that Facebook took down a significant portion of the Internet today. A bug in their Facebook Connect script caused users to be redirected to a Facebook error page....
New "Lucky Thirteen" SSL Vulnerabilities: CloudFlare Users Protected
2013-02-04
CloudFlare often gets early word of new vulnerabilities before they are released. Last week we got word that today (Monday, February 4, 2013) there would be a new SSL vulnerability announced. ...
Today's System-Wide Upgrade
2013-01-11
Today from 21:00 - 23:00 UTC CloudFlare scheduled a maintenance window. During that time, CloudFlare's interface was offline. While it was only two hours of time (and we finished a bit early, at 22:16 UTC) what went on during that window had been in the works for several months. ...
CloudFlare: Fastest Free DNS, Among Fastest DNS Period
2013-01-07
CloudFlare runs one of the largest networks of DNS servers in the world. Over the last few months, we've invested in making our DNS as fast and responsive as possible. We were happy to see these efforts pay off in third-party DNS test results....
CloudFlare's 2012: Happy New Year!
2013-01-01
For about half the world (and about half of CloudFlare's data centers) it's already 2013. As our team (most of whom are in San Francisco) get ready to celebrate New Year's Eve, wanted to quickly look back on CloudFlare's 2012. ...
Optimizing Your Linux Stack for Maximum Mobile Web Performance
2012-12-31
We spend a lot of time at CloudFlare thinking about how to make the Internet fast on mobile devices. Currently there are over 1.2 billion active mobile users and that number is growing rapidly....
CDNJS: The Fastest Javascript Repo on the Web
2012-12-12
More than a year ago, Ryan Kirkman and Thomas Davis approached us about a project they were working on. Dubbed CDNJS, the project had a noble goal: make the world's Javascript resources load as fast as possible....
What We Just Did to Make SSL Even Faster
2012-12-11
A little over a month ago, we published a couple of blog posts about how we were making SSL faster. Specifically, we enabled OCSP stapling across our network....
How Syria Turned Off the Internet
2012-11-29
Today, 29 November 2012, between 1026 and 1028 (UTC), all traffic from Syria to the rest of the Internet stopped. At CloudFlare, we witnessed the drop off. We've spent the morning studying the situation to understand what happened. ...
Choosing a Two-Factor Authentication System
2012-11-28
We've been thinking about how to best implement two-factor authentication to better protect our customers' accounts for quite some time now. When, about 6 months ago, my account was targeted by hackers the importance of a good account security became clear. ...
Ceasefires Don't End Cyberwars
2012-11-27
There is a significant conflict in the Middle East. As has been widely reported, along with the physical confrontation between the Israelis and Palestinians, there have been widespread cyber attacks....
CloudFlare's Global Reach
2012-11-02
CloudFlare is based in San Francisco, California, USA but we serve a global audience. Every minute of every day we send and receive traffic from nearly all of the world's networks....
CloudFlare Works with GlobalSign to Make SSL Faster Across the Web
2012-11-01
Earlier this week we announced how CloudFlare enabled OCSP stapling in order to improve our customers' SSL performance. OCSP stapling is awesome and improves SSL performance by as much as 30%. However, it is limited to browsers that support OCSP stapling and only benefits CloudFlare's customers....
What Happens When a Hurricane Hits the Web
2012-10-31
Now that Hurricane Sandy has passed and the flood waters have begun to recede, we wanted to recap what we saw over the last 24 hours across the CloudFlare network....
Deep Inside a DNS Amplification DDoS Attack
2012-10-30
A few weeks ago I wrote about DNS Amplification Attacks. These attacks are some of the largest, as measured by the number of Gigabits per second (Gbps), that we see directed toward our network....
OCSP Stapling: How CloudFlare Just Made SSL 30% Faster
2012-10-29
This week CloudFlare is announcing several things we're doing to significantly improve the performance of SSL. Too few sites are secured with SSL. One of the reasons sites don't implement SSL is that it can slow down web performance. ...
Sandy, Meet CloudFlare
2012-10-28
There is a large hurricane in the Atlantic Ocean which is likely to come on-shore in the Eastern United States late tomorrow. Dubbed Sandy, the current track of the hurricane has it making landfall around Philadelphia, Pennsylvania....
WSJ: CloudFlare Named Most Innovative Internet & Networking Company, Second Year in a Row
2012-10-15
We just got word from the Wall Street Journal that CloudFlare was named the Most Innovative Internet & Networking Company of 2012. This is the second year in a row that CloudFlare has won this award. ...