We're hosting a Null Singapore meetup!
2016-02-19
We're happy to announce that next week CloudFlare is hosting the Null Security meetup in Singapore. You are invited!...
Padding oracles and the decline of CBC-mode cipher suites
2016-02-12
At CloudFlare, we’re committed to making sure the encrypted web is available to everyone, even those with older browsers. At the same time, we want to make sure that as many people as possible are using the most modern and secure encryption available to them. ...
Change the (S)Channel! Deconstructing the Microsoft TLS Session Resumption bug
2016-02-11
Several months ago we started hearing occasional reports from .NET developers that they were having trouble maintaining HTTPS sessions with one of our customer’s websites. ...
CloudFlare’s Impact On The HTTP/2 “Universe”
2016-02-03
CloudFlare released HTTP/2 support for all customers on December 3rd, 2015. Now, two months later, it's time to take a look at the impact of this release on the HTTP/2 "universe"....
Advanced Technical "Hacks" for your site's SEO
2016-01-25
Improving your site’s SEO is probably top of mind for you, but doing so takes a lot of hard work and the rules of the game are constantly changing....
CloudFlare launches new data centers in Oslo and Minneapolis
2016-01-22
Four thousand miles (6,400 kilometers) separate CloudFlare’s latest two data centers: Oslo (#75) and Minneapolis (#76)....
Preventing Malicious Request Loops
2016-01-21
The web is an collaborative ecosystem. Web standards exist to ensure that participants of the network behave in a predictable way....
We’re Hosting a Go Hackathon!
2016-01-20
The Go test coverage implementation is quite ingenious: when asked to, the Go compiler will preprocess the source so that when each code portion is executed a bit is set in a coverage bitmap....
Go coverage with external tests
2016-01-19
The Go test coverage implementation is quite ingenious: when asked to, the Go compiler will preprocess the source so that when each code portion is executed a bit is set in a coverage bitmap....
Think Global, Peer Local. Peer with CloudFlare at 100 Internet Exchange Points
2016-01-18
Internet Exchange Points (IXPs) or Network Access Points (NAPs) facilities are where networks meet, participating in what's known as peering, which interconnects various parts of the global Internet....
Flexible, secure SSH with DNSSEC
2016-01-13
If you read this blog on a regular basis, you probably use the little tool called SSH, especially its ubiquitous and most popular implementation OpenSSH....
Cairo, Egypt: CloudFlare’s 74th Data Center
2015-12-30
It’s been a big year of expansion for CloudFlare’s global network as we added new data centers across six continents, and we’re certainly not done. Today we announce the launch of our newest data center in Cairo, Egypt and a partnership with Telecom Egypt. ...
How to Talk to Your Parents About Encryption
2015-12-25
It’s December 25th, which means most of you are probably at home visiting with family. I asked a few of the security engineers here at CloudFlare how they explain their jobs when they’re home for the holidays, and here's what they had to say....
Zdrasti, Sofia! CloudFlare’s 73rd Data Center Now Live
2015-12-24
Only days after the launch of our Hamburg data center, CloudFlare is excited to announce yet another European data center - this time in Sofia, Bulgaria. With over 1.2 million people, Sofia is a city with rich history tracing back over 7,000 years....
Why it’s harder to forge a SHA-1 certificate than it is to find a SHA-1 collision
2015-12-22
It’s well known that SHA-1 is no longer considered a secure cryptographic hash function. Researchers now believe that finding a hash collision (two values that result in the same value when SHA-1 is applied) is inevitable and likely to happen....
What's inside net/http? Late binding in the Go standard library
2015-12-21
It's well known that we're heavy users of the Go programming language at CloudFlare. Our work often involves delving into the standard library source code to understand internal code paths, error handling and performance characteristics....
Unser neues 72. Rechenzentrum: Hamburg
2015-12-18
Yesterday we announced new points of presence (PoPs) in Montreal and Vancouver. Today: Hamburg. However, the holidays are hardly over, and we have lots more cheer to spread. ...
Vancouver & Montreal, Canada: CloudFlare's latest data centers
2015-12-17
With the holiday season in full swing, it's only fitting that we continue to spread cheer, joy and a faster Internet around the world. To start the season we begin in Canada with NHL rivals Montreal and Vancouver, our 70th and 71st points of presence (PoPs) globally. Montreal and Vancouver, the 2nd and 3rd largest Canadian metropolitan areas, respectively, join our existing PoP in Canada's largest, Toronto. Together, CloudFlare's network in Canada is now milliseconds away from the country's ...
A Different Kind of POP: The Joomla Unserialize Vulnerability
2015-12-17
At CloudFlare, we spend a lot of time talking about the PoPs (Points of Presence) we have around the globe, however, on December 14th, another kind of POP came to the world: a vulnerability being exploited in the wild against Joomla’s Content Management System....
Partial kernel bypass merged into netmap main
2015-12-17
In a previous post we described our work on a new netmap mode called single-rx-queue. After submitting the pull request, the netmap maintainers told us that the patch was interesting, but they would prefer something more configurable instead of a tailored custom mode....
