Using Cloudflare R2 as an apt/yum repository
09/15/2022
Host your apt/yum repositories like how Cloudflare Tunnel does. Here's how...
How we built Pingora, the proxy that connects Cloudflare to the Internet
09/14/2022
Today we are excited to talk about Pingora, a new HTTP proxy we’ve built in-house using Rust that serves over 1 trillion requests a day...
Ethereum Gateway support for Görli + Sepolia Testnets and the Ethereum Merge
09/13/2022
Today we are excited to announce support for the upcoming Ethereum Merge and Sepolia and Görli testnet support...
Cloudflare named a Leader by Gartner
09/06/2022
Gartner has recognised Cloudflare as a Leader in the 2022 "Gartner® Magic Quadrant™ for Web Application and API Protection (WAAP)" report that evaluated 11 vendors for their ‘ability to execute’ and ‘completeness of vision’...
Improving the accuracy of our machine learning WAF using data augmentation and sampling
09/05/2022
Data Generation and Augmentation methods to train an effective machine learning WAF...
Blocking Kiwifarms
09/03/2022
We have blocked Kiwifarms. Visitors to any of the Kiwifarms sites that use any of Cloudflare's services will see a Cloudflare block page and a link to this post. ...
Log analytics using ClickHouse
09/02/2022
When a request at Cloudflare throws an error, information gets logged in our requests_error pipeline. The error logs are used to help troubleshoot customer-specific or network-wide issues...
Cloudflare's abuse policies & approach
08/31/2022
Cloudflare launched nearly twelve years ago. Over that time, our set of services has become much more complicated. With that complexity we have developed policies around how we handle abuse of different features Cloudflare provides...
Introducing thresholds in Security Event Alerting: a z-score love story
08/30/2022
Today we are excited to announce thresholds for our Security Event Alerts: a new and improved way of detecting anomalous spikes of security events on your Internet properties. By introducing a threshold, we are able to make alerts more accurate and only notify you when it truly matters...
Performance isolation in a multi-tenant database environment
08/26/2022
Enforcing stricter performance isolation across neighboring tenants who rely on our storage infrastructure...
Open sourcing our fork of PgBouncer
08/26/2022
We are releasing our internal fork of PgBouncer, filled with authentication bug fixes and new features around per user and connection pool isolation...
Deep dives & how the Internet works
08/25/2022
We have amazing deep dives in our blog, but also research and how the Internet works kind of stories. Here are some highlights from 2022, and before (with glimpses of our history)....
Cloudflare Support Portal gets an overhaul
08/16/2022
The Cloudflare Support team has launched a new Support Portal. The portal will give you access to self-help resources, diagnostics with troubleshooting guides, and will provide for easier ticket submission...
Crawler Hints supports Microsoft’s IndexNow in helping users find new content
08/12/2022
Cloudflare is uniquely positioned to help give crawlers hints about when they should recrawl, if new content has been added, or if content on a site has recently changed...
2022 attacks! An August reading list to go “Shields Up”
08/11/2022
In 2022, cybersecurity, more than ever, is a must-have for those who don’t want to take chances on getting caught in a cyberattack with difficult to deal with consequences. Here’s a reading list what you need to know about attacks that is also a guide on how to be protected...
The mechanics of a sophisticated phishing scam and how we stopped it
08/09/2022
Yesterday, August 8, 2022, Twilio shared that they’d been compromised by a targeted phishing attack. Around the same time as Twilio was attacked, we saw an attack with very similar characteristics also targeting Cloudflare’s employees...
Introducing new Cloudflare for SaaS documentation
08/09/2022
Cloudflare for SaaS offers a suite of Cloudflare products and add-ons to improve the security, performance, and reliability of SaaS providers. Now, the Cloudflare for SaaS documentation outlines how to optimize it in order to meet your goals...
1.1.1.1 + WARP: More features, still private
08/06/2022
We’re announcing two major improvements to our 1.1.1.1 + WARP apps...
Build your next big idea with Cloudflare Pages
08/05/2022
We believe every developer deserves to dream big without breaking the bank. That's why on Cloudflare Pages you can get unlimited requests, bandwidth, seats and projects --- for free!...
Building a scheduling system with Workers and Durable Objects
08/05/2022
Cloudflare WorkersDurable ObjectsJavaScriptServerlessEdgeDeveloper PlatformAgile Developer ServicesDevelopers
In this post we're going to show you how to build a scalable service that will schedule HTTP requests on a specific schedule or as one-off at a specific time ...
Experiment with post-quantum cryptography today
08/04/2022
The future is post quantum. Enable post-quantum key agreement on your test zone today and get a headstart...
Building and using Managed Components with WebCM
08/03/2022
This is how Managed Components can be useful for you right now, if you manage a website or if you’re building third-party tools...
Load Balancing with Weighted Pools
08/02/2022
Today, we’re excited to announce a frequently requested feature for our Load Balancer – Weighted Pools...
Running Zig with WASI on Cloudflare Workers
08/01/2022
After the recent announcement regarding WASI support in Workers I decided to see what it would take to get code written in Zig to run as a Worker, and it turned out to be pretty trivial. This post documents the process I followed...
When the window is not fully open, your TCP stack is doing more than you think
07/26/2022
In this blog post I'll share my journey deep into the Linux networking stack, trying to understand the memory and window management of the receiving side of a TCP connection...
Cloudflare deployment in Guam
07/25/2022
Cloudflare Deployment in Guam - Delivering a Better Internet for Faraway Pacific Ocean Archipelagos Residents...
Using Apache Kafka to process 1 trillion inter-service messages
07/19/2022
We learnt a lot about Kafka on the way to 1 trillion messages, and built some interesting internal tools to ease adoption that will be explored in this blog post...
A story about AF_XDP, network namespaces and a cookie
07/18/2022
A crash in a development version of flowtrackd (the daemon that powers our Advanced TCP Protection) highlighted the fact that libxdp (and specifically the AF_XDP part) was not Linux network namespace aware. This blogpost describes the debugging journey to find the bug, as well as a fix....
Working in public — our docs-as-code approach
07/15/2022
Besides following a docs-as-code approach, at Cloudflare we handle our documentation changes in a public repository. The contributions we get from the entire Cloudflare community help us make our documentation better every day...
How the James Webb Telescope's cosmic pictures impacted the Internet
07/14/2022
We show how the July 11-12 James Webb Telescope images that were revealed had an impact on DNS traffic in NASA and ESA websites, video and image hosting platforms, and news websites. The ‘cosmic’ results may be surprising...
Mantis - the most powerful botnet to date
07/14/2022
We named the botnet that launched the 26M rps (requests per second) DDoS attack "Mantis" as it is also like the Mantis shrimp, small but very powerful...
25,000 new trees in Nova Scotia
07/13/2022
Cloudflare is proud to announce the first 35,000 trees from our commitment to help clean up bad bots (and the climate) have been planted...
Waiting Room Event Scheduling protects your site during online events
07/12/2022
With Event Scheduling for Waiting Room, you can protect your servers from being overloaded during your event while delivering a user experience that is unique to the occasion and consistent with your brand...
Introducing Location-Aware DDoS Protection
07/11/2022
Location-Aware DDoS Protection is now available in beta for Cloudflare Enterprise customers that are subscribed to the Advanced DDoS service...
NIST’s pleasant post-quantum surprise
07/08/2022
On Tuesday, the US National Institute of Standards and Technology (NIST) announced which post-quantum cryptography they will standardize. We were already drafting this post with an educated guess on the choice NIST would make....