CloudFlare Now Supports WebSockets
08/05/2014
I'm pleased to announce that CloudFlare now supports WebSockets. The ability to protect and accelerate WebSockets has been one of our most requested features....
Experimenting with mozjpeg 2.0
07/29/2014
One of the services that CloudFlare provides to paying customers is called Polish. Polish automatically recompresses images cached by CloudFlare to ensure that they are as small as possible and can be delivered to web browsers as quickly as possible....
Listo! Medellin, Colombia: CloudFlare's 28th Data Center
07/22/2014
With the World Cup at an end, so too is our latest round of data center expansion. Following deployments in Madrid, Milan and São Paulo, we are thrilled to announce our 28th data center in Medellin, Colombia....
Courage to change things
07/11/2014
This was an internal email that I sent to the CloudFlare team about how we are not afraid to throw away old code. We thought it was worth sharing with a wider audience....
CloudFlare Joins Three More Peering Exchanges in Australia
07/11/2014
In the coming weeks, connectivity to CloudFlare in Australia is going to a new level. As part of CloudFlare’s ongoing upgrades program, we established connections to three new Internet exchanges: the Megaport Internet exchanges in Sydney, Brisbane, and Melbourne. ...
Introducing CFSSL - CloudFlare's PKI toolkit
07/10/2014
Today we’re proud to introduce CFSSL—our open source toolkit for everything TLS/SSL. CFSSL is used internally by CloudFlare for bundling TLS/SSL certificates chains, and for our internal Certificate Authority infrastructure....
ReplayLastGoal and CloudFlare: Fanning World Cup Flames
07/08/2014
The World Cup is, at once, exhilarating and agonizing, and not just for those lucky souls in Rio or Manaus, folks working from home, or anyone else sitting happily in front of a TV....
Parabéns, Brasil! CloudFlare's 27th Data Center Now Live
07/07/2014
Brazil is home to not only the most successful national football team in history (Pentacampeão), but also to the most technologically advanced World Cup ever hosted. ...
Introducing the BPF Tools
07/03/2014
In a recent article I described the basic concepts behind the use of Berkeley Packet Filter (aka BSD Packet filter or BPF) bytecode for high performance packet filtering, and the xt_bpf iptables module....
Making code better with reviews
07/02/2014
In the past we've written about how CloudFlare isn't afraid to rip out and replace chunks of code that have proved to be hard to maintain or have simply reach end of life. ...
Q&A with Ryan Lackey
06/18/2014
I started using the Internet when I was young—in the early 1990s, before I was a teenager. I was drawn to security for two main reasons....
CloudFlare Acquires CryptoSeal
06/18/2014
We're excited to announce that CloudFlare has acquired the Trusted Computing and virtual private network (VPN) as a service company CryptoSeal. ...
Buongiorno, Milano! CloudFlare’s 26th Data Center Now Live
06/16/2014
Italy is known for many great things. First and foremost, the Azzurri—2006 World Cup champions and (as of yesterday) dashers of England's world cup hopes—but also the Colosseum, the fountains of Florence, the canals of Venice, the Alps, and more....
CloudFlare's 25th data center turns up to ease collective disappointment of Spanish fútbol fans
06/13/2014
After a drubbing earlier today of La Roja by The Flying Dutchmen, we felt obliged to deliver at least one piece of good news to the 34 million fútbol loving Internet users in Spain: CloudFlare's 25th data center in Madrid, Spain....
New .uk domains now supported
06/13/2014
On the 10th of June, the UK domain registry Nominet made available second-level domain namespace to the public, allowing anyone to register a domain ending with simply .uk...
Naming Project Galileo
06/12/2014
Earlier today, CloudFlare announced Project Galileo to protect free speech on the Web by using its sophisticated anti-DDoS resources. ...
Protecting Free Expression Online
06/12/2014
Over the last few years, we’ve witnessed a troubling trend: an increasing number of politically or artistically important sites targeted by very large denial of service attacks. ...
Eliminating the last reasons to not enable IPv6
06/05/2014
Today is June 6. For the last two years, the date has been celebrated as World IPv6 Day. CloudFlare has offered full IPv6 support as well as our IPv6-to-IPv4 gateway since 2012....
Three years after World IPv6 Day
06/05/2014
It’s been over 1,000 days since the Internet Society’s World IPv6 Day and a lot of positive things have happened in that world of IPv6 content delivery. At CloudFlare we have not been sitting still either. ...
New OpenSSL vulnerabilities: CloudFlare systems patched
06/05/2014
The OpenSSL team announced seven vulnerabilities covering OpenSSL 0.9.8, 1.0.0, 1.0.1 and 1.0.2 (i.e. all versions) earlier today....
CloudFlare is PCI Certified
06/04/2014
Great news for everyone using CloudFlare on an e-commerce site, or a site accepting or processing credit card transactions. After undergoing a Payment Card Industry (PCI) Data Security Standard (DSS) 2.0 security control assessment, we’ve been certified as a Level 1 service provider....
Welcome to Miami: HostingCon 2014
05/28/2014
This year’s HostingCon will be held in Miami Beach, and the CloudFlare team is busy prepping. This is our fourth year at the show and our team is excited to see partners, customers and friends....
CloudFlare Meetups: Set your mind on fire.
05/27/2014
Education, expertise, and community: these themes define Meetups at CloudFlare. Meetups in our office bring together industry leaders, academics, and field experts to examine topics ranging from the Go programming language, to databases, to cryptography, and more....
BPF - the forgotten bytecode
05/21/2014
Every once in a while I run into an obscure computer technology that is a hidden gem, which over the years has become mostly forgotten. This is exactly how I feel about the tcpdump tool and its kernel counterpart the packet filter interface....
The Web is World-Wide, or who still needs RC4?
05/19/2014
Two weeks ago we changed our TLS configuration to deprioritize the RC4 encryption method because it is widely thought to be vulnerable to attack. At the time we had an internal debate about turning off RC4 altogether, but statistics showed that we couldn't....
Killing RC4: The Long Goodbye
05/07/2014
At CloudFlare we spend a lot of time thinking about the best way to keep our customers’ data safe. Despite recent troubles, HTTPS is still the best way to deliver encrypted content for the web. ...
Tracking our SSL configuration
05/03/2014
Over time we've updated the SSL configuration we use for serving HTTPS as the security landscape has changed. In the past we've documented those changes in blog posts....
Searching for The Prime Suspect: How Heartbleed Leaked Private Keys
04/27/2014
Within a few hours of CloudFlare launching its Heartbleed Challenge the truth was out. Not only did Heartbleed leak private session information (such as cookies and other data that SSL should have been protecting), but the crown jewels of an HTTPS web server were also vulnerable....
Upcoming Meetups at CloudFlare
04/21/2014
At CloudFlare, we love connecting with our communities, and so we are excited to announce two meetups to be hosted here at the CloudFlare headquarters in San Francisco next month....
The Hidden Costs of Heartbleed
04/17/2014
A quick followup to our last blog post on our decision to reissue and revoke all of CloudFlare's customers' SSL certificates. One question we've received is why we didn't just reissue and revoke all SSL certificates as soon as we got word about the Heartbleed vulnerability?...
The Heartbleed Aftermath: all CloudFlare certificates revoked and reissued
04/17/2014
Eleven days ago the Heartbleed vulnerability was publicly announced. Last Friday, we issued the CloudFlare Challenge: Heartbleed and simultaneously started the process of revoking and reissuing all the SSL certificates....
Certificate Revocation and Heartbleed
04/12/2014
As you may have noticed, the CloudFlare Heartbleed Challenge has been solved. The private key for the site cloudflarechallenge.com has been obtained by several authorized attackers via the Heartbleed exploit....
The Results of the CloudFlare Challenge
04/11/2014
Earlier today we announced the Heartbleed Challenge. We set up a nginx server with a vulnerable version of OpenSSL and challenged the community to steal its private key....