April 10, 2014 2:59AM
Jetpack for WordPress: automatic protection
WordPress
Speed & Reliability
Vulnerabilities
As we've said before, lots of our users run WordPress on their websites and its popularity makes it a big target. So when a new vulnerability is discovered, acting quickly is prudent....
April 07, 2014 10:00AM
Staying ahead of OpenSSL vulnerabilities
TLS
Bugs
OpenSSL
Vulnerabilities
Reliability
Security
SSL
Today a new vulnerability was announced in OpenSSL 1.0.1 that allows an attacker to reveal up to 64kB of memory to a connected client or server (CVE-2014-0160). We fixed this vulnerability last week before it was made public....
April 03, 2014 1:34AM
Introducing CNAME Flattening: RFC-Compliant CNAMEs at a Domain's Root
Reliability
DNS
This post is about a new feature we've been quietly rolling out over the last few months. Last week we began enabling it for everyone by default....
April 01, 2014 2:19AM
The weird and wonderful world of DNS LOC records
RRDNS
DNS
Reliability
Attacks
Go
A cornerstone of CloudFlare's infrastructure is our ability to serve DNS requests quickly and handle DNS attacks. To do both those things we wrote our own authoritative DNS server called RRDNS in Go....
March 17, 2014 10:37AM
How to ensure your server's software stays secure?
DDoS
RSA
Events
At CloudFlare, security is on the top of our minds. We are always looking for ways to better secure the data we are entrusted with and improve the security of our customers' websites....
March 13, 2014 9:00AM
I joined CloudFlare on Monday along with 5,000 others
IPv6
Cloudflare History
Life @ Cloudflare
There are days when you feel quite ecstatic and know you have succeeded in completing each and every task set before you. Monday was one of those days - well nearly....
March 12, 2014 8:59AM
What do you do when the world’s attention is on you?
Customers
Speed & Reliability
SXSW
This is a guest post from Rodney Gibbs. Rodney is the CIO of The Texas Tribune, a nonprofit media organization that covers public policy, politics, and government....
March 11, 2014 5:00PM
The Web's Silver Jubilee
History
spdy
TLS
SSL
Security
No matter what your age, it's hard to believe that the World-Wide Web is 25 today. For the young the web has always been part of their lives, for the older it seems like it was invented only yesterday....
March 11, 2014 4:00PM
WordPress Pingback Attacks and our WAF
WordPress
WAF
Attacks
At CloudFlare a lot of our customers use WordPress, that's why we have our own plugin, we hang out at WordCamp and we wrote a WordPress specific ruleset for our Web Application Firewall....
March 10, 2014 4:30PM
ECDSA: The digital signature algorithm of a better internet
TLS
HTTPS
Elliptic Curves
RSA
Security
Cryptography
This blog post is dedicated to the memory of Dr. Scott Vanstone, popularizer of elliptic curve cryptography and inventor of the ECDSA algorithm. He passed away on March 2, 2014....
March 05, 2014 12:00AM
It's Go Time on Linux
Linux
Go
DDoS
Google
Attacks
Some interesting changes related to timekeeping in the upcoming Go 1.3 release inspired us to take a closer look at how Go programs keep time with the help of the Linux kernel. Timekeeping is a complex topic and determining the current time isn’t as simple as it might seem at first glance....
February 28, 2014 9:00AM
Introducing lua-capnproto: better serialization in Lua
Data
Speed & Reliability
Cap'n Proto
LUA
When we need to transfer data from one program to another program, either within a machine or from one data center to another some form of serialization is needed....
February 27, 2014 9:00AM
CloudFlare Publishes Transparency Report for 2013
Legal
On January 27, the Department of Justice and the Director of National Intelligence announced a change in rules governing the disclosure of National Security Orders....
February 24, 2014 10:00AM
Cloudflare Acquires StopTheHacker
Acquisitions
We're excited to announce that Cloudflare has acquired the anti-malware firm StopTheHacker. I wanted to share a little bit about the rationale behind the acquisition and what to expect from the two teamed up companies going forward....
February 23, 2014 11:00AM
Good News: Vulnerable NTP Servers Closing Down
Attacks
Reliability
On Monday, February 10th, CloudFlare experienced a large DDoS attack, with nearly 400Gbps of NTP attack traffic hitting our network....
February 17, 2014 4:00PM
Staying up to date with the latest protocols: SPDY/3.1
Google
spdy
Speed & Reliability
Claire
QUIC
Back in June 2012 CloudFlare started a beta rollout of Google's then new SPDY protocol and we took a detailed look at how SPDY makes web sites faster....
February 14, 2014 1:00AM
Introducing Strict SSL: Protecting Against a On-Path Attack on Origin Traffic
TLS
HTTPS
Encryption
SSL
Security
Cryptography
At CloudFlare, we are always looking for ways to improve the security of our customers’ websites. One of the features we provide is the ability to serve their website encrypted over SSL/TLS....
February 13, 2014 1:00AM
Technical Details Behind a 400Gbps NTP Amplification DDoS Attack
Attacks
Tech Talks
Reliability
DDoS
Deep Dive
On Monday we mitigated a large DDoS that targeted one of our customers. The attack peaked just shy of 400Gbps. We've seen a handful of other attacks at this scale, but this is the largest attack we've seen that uses NTP amplification....
January 30, 2014 2:00PM
Stories from our recent global data center upgrade
Data Center
California
Texas
USA
Europe
Asia
France
Korea
Careers
Life @ Cloudflare
Each day at CloudFlare is full of surprises. As it turns out, it takes a lot of work to stop massive attacks and to help make the web faster. Over the past six months, our entire team has contributed in every way imaginable to more than double the capacity of our global network....
January 30, 2014 9:24AM
CloudFlare DNS is simple, fast and flexible
DNS
TTL
Reliability
Over the past few years, the CloudFlare blog has covered a great range of different topics, drilling down into the technology we use to both protect websites from attack, and optimise them so that they load faster for visitors....