Hurricane Irma
09/09/2017
Yesterday, we described how Hurricane Irma impacted several Caribbean islands, with the damage including a significant disruption to Internet access....
The Story of Two Outages
09/07/2017
Over the last two days, Cloudflare observed two events that had effects on global Internet traffic levels. Cloudflare handles approximately 10% of all Internet requests, so we have significant visibility into traffic from countries and networks across the world....
SIDH in Go for quantum-resistant TLS 1.3
09/01/2017
Most of today's cryptography is designed to be secure against an adversary with enormous amounts of computational power. This means estimating how much work certain computations require, and choosing cryptographic parameters based on our best estimates....
Portland (Oregon): Cloudflare's 117th Data Center!
09/01/2017
Even as the luckiest amongst us across the US West Coast dashed off to Oregon to be closer to the solar eclipse path of totality, Cloudflare engineers were busy turning up our newest data center in Portland....
One way to help Hurricane Harvey victims
09/01/2017
Hurricane Harvey hit Texas last Friday as a Category 4 storm. Although Harvey's category was quickly downgraded, the storm lingered around for days, bringing 50 inches of rain to the greater Houston area....
The WireX Botnet: How Industry Collaboration Disrupted a DDoS Attack
08/28/2017
On August 17th, 2017, multiple Content Delivery Networks (CDNs) and content providers were subject to significant attacks from a botnet dubbed WireX. ...
App Highlight: Trebble
08/25/2017
Earlier this month, Armel Beaudry Kembe spoke at the Ottawa JS meetup to introduce his experience in developing his app Trebble.fm on the new Cloudflare App platform....
Going Global - a Localization Case Study at Cloudflare
08/23/2017
Today Cloudflare serves nearly 10% of all global internet requests and more than 80% of our customers are based outside of the United States. ...
Advancing Privacy Protection with the GDPR
08/21/2017
The road towards implementation of the new European GDPR (the General Data Protection Regulation) has been a long one, even though public awareness of its impact, especially outside of Europe, is only now really starting to take hold. ...
App Highlight: Hardenize
08/18/2017
Hardenize is a comprehensive security tool that continuously monitors the security and configuration of your domain name, email, and website....
Broken packets: IP fragmentation is flawed
08/18/2017
As opposed to the public telephone network, the internet has a Packet Switched design. But just how big can these packets be?...
Why We Terminated Daily Stormer
08/16/2017
Earlier today, Cloudflare terminated the account of the Daily Stormer. We've stopped proxying their traffic and stopped answering DNS requests for their sites. We've taken measures to ensure that they cannot sign up for Cloudflare's services ever again....
Power outage hits the island of Taiwan. Here’s what we learned.
08/16/2017
At approximately 4:50pm local time (8:50am UTC) August 15, a major unexpected power outage hit the island of Taiwan with a significant amount of its power generation facilities going down....
Recap: How to make a Cloudflare App workshop in Austin
08/11/2017
Cloudflare hosted a developer preview workshop in Austin for Cloudflare Apps, taught by Zack Bloom, tech lead of Cloudflare Apps....
Moving Forward with Path Forward
08/10/2017
In February, I blogged about our first rotation of Path Forward returnships and the awesome people we’ve hired as a result of the program....
The Languages Which Almost Became CSS
08/02/2017
The history of all the languages which almost became CSS and the development of the styled web. When Tim Berners-Lee announced HTML in 1991 there was no method of styling pages. How a given HTML tag was rendered was determined by the browser, often with significant input from the user’s preferences. To many, it seemed like a good idea to create a standard way for pages to ‘suggest’ how they might prefer to be rendered stylistically. This was adapted from a post which originally appeared on...
Net Neutrality Day: Cloudflare + Fight for the Future
07/25/2017
For Net Neutrality Day on July 12, Fight for the Future launched a Cloudflare App installable for websites all over the world. Sites with it installed saw as many as 178M page views prompting the users to write to their local congressional representative on the importance of Net Neutrality....
How to use Cloudflare for Service Discovery
07/21/2017
Cloudflare runs 3,588 containers, making up 1,264 apps and services that all need to be able to find and discover each other in order to communicate -- a problem solved with service discovery....
Aquele Abraço Rio de Janeiro: Cloudflare's 116th Data Center!
07/19/2017
Cloudflare is excited to announce our newest data center in Rio de Janeiro, Brazil. This is our eighth data center in South America, and expands the Cloudflare network to 116 cities across 57 countries....
Ninth Circuit Rules on National Security Letter Gag Orders
07/18/2017
As we’ve previously discussed on this blog, Cloudflare has been challenging for years the constitutionality of the FBI’s use of national security letters (NSLs) to demand user data on a confidential basis....
Getting started with Cloudflare Apps
07/12/2017
We recently launched our new Cloudflare Apps platform, and love to see the community it is building. In an effort to help people who run web services such as websites, APIs and more, we would like to help make your web services faster, safer and more reliable....
High-reliability OCSP stapling and why it matters
07/10/2017
At Cloudflare our focus is making the internet faster and more secure. Today we are announcing a new enhancement to our HTTPS service: High-Reliability OCSP stapling....
Participate in the Net Neutrality Day of Action
07/09/2017
We at Cloudflare strongly believe in network neutrality, the principle that networks should not discriminate against content that passes through them. ...
How to make your site HTTPS-only
07/06/2017
The Internet is getting more secure every day as people enable HTTPS, the secure version of HTTP, on their sites and services....
Three little tools: mmsum, mmwatch, mmhistogram
07/04/2017
In a recent blog post, my colleague Marek talked about some SSDP-based DDoS activity we'd been seeing recently. In that blog post he used a tool called mmhistogram to output an ASCII histogram....
A container identity bootstrapping tool
07/03/2017
Everybody has secrets. Software developers have many. Often these secrets—API tokens, TLS private keys, database passwords, SSH keys, and other sensitive data—are needed to make a service run properly and interact securely with other services. ...
Stupidly Simple DDoS Protocol (SSDP) generates 100 Gbps DDoS
06/28/2017
Last month we shared statistics on some popular reflection attacks. Back then the average SSDP attack size was ~12 Gbps....
Announcing the Cloudflare Apps Platform and Developer Fund
06/27/2017
When we started Cloudflare we had no idea if anyone would validate our core idea. Our idea was that everyone should have the ability to be as fast and secure as the Internet giants like Google, Facebook, and Microsoft. Six years later, it's incredible how far that core idea has taken us....
Announcing the New Cloudflare Apps
06/27/2017
Today we’re excited to announce the next generation of Cloudflare Apps. Cloudflare Apps is an open platform of tools to build a high quality website....
Project Jengo: Explaining Challenges to Patent Validity (and a looming threat)
06/23/2017
We’ve written a couple times about the problem of patent trolls, and what we are doing in response to the first case a troll filed against Cloudflare. We set a goal to find prior art on all 38 Blackbird Tech patents and applications. ...
When the Internet (Officially) Became the Public Square
06/21/2017
Sometimes, well-intended efforts to prevent unacceptable behavior run into the reality of what it means to have an open and free society....
How we built rate limiting capable of scaling to millions of domains
06/07/2017
Back in April we announced Rate Limiting of requests for every Cloudflare customer. Being able to rate limit at the edge of the network has many advantages: it’s easier for customers to set up and operate, their origin servers are not bothered by excessive traffic or layer 7 attacks....
Less Is More - Why The IPv6 Switch Is Missing
05/25/2017
At Cloudflare we believe in being good to the Internet and good to our customers. By moving on from the legacy world of IPv4-only to the modern-day world where IPv4 and IPv6 are treated equally, we believe we are doing exactly that....
Patent Troll Battle Update: Doubling Down on Project Jengo
05/25/2017
We knew the case against patent trolls was the right one, but we have been overwhelmed by the response to our blog posts on patent trolls and our program for finding prior art on the patents held by Blackbird Tech, which we’ve dubbed Project Jengo....
Reflections on reflection (attacks)
05/24/2017
Recently Akamai published an article about CLDAP reflection attacks. This got us thinking. We saw attacks from Connectionless LDAP servers back in November 2016 but totally ignored them because our systems were automatically dropping the attack traffic without any impact....