Oxy is Cloudflare's Rust-based next generation proxy framework
2023-03-02
In this blog post, we are proud to introduce Oxy - our modern proxy framework, developed using the Rust programming language...
How we built an open-source SEO tool using Workers, D1, and Queues
2023-03-02
In this blog post, I’m excited to show off some of the new tools in Cloudflare’s developer arsenal, D1 and Queues, to prototype and ship an internal tool for our SEO experts at Cloudflare....
How Rust and Wasm power Cloudflare's 1.1.1.1
2023-02-28
Introducing a new DNS platform that powers 1.1.1.1 and various other products....
ROFL with a LOL: rewriting an NGINX module in Rust
2023-02-24
Cloudflare engineers rewrote cf-html, an old NGINX module, in Rust. This project revealed much about NGINX, potentially leading to its full replacement in Cloudflare's infrastructure....
One year of war in Ukraine: Internet trends, attacks, and resilience
2023-02-23
This blog post reports on Internet insights during an historical war in Europe that has been seen and shared online, and discusses how Ukraine's Internet remained resilient in spite of dozens of disruptions in three different stages of the conflict....
The Chief Zero Trust Officer: a new role for a new era of cybersecurity
2023-02-21
Implementing Zero Trust can be challenging, and efforts may stall. The need for a Chief Zero Trust Officer (CZTO) is driven by the increasing importance of Zero Trust security in the face of escalating cyber attacks....
So long, and thanks for all the deployments: deprecating Wrangler v1
2023-02-16
Version 1 of Wrangler has served us well for years. But with a new major version to focus on, it’s time to say goodbye...
A look at Internet traffic trends during Super Bowl LVII
2023-02-13
We look at who the biggest winners were among Super Bowl advertisers, and examine traffic trends for food delivery services, social media, and sports and betting sites. We also review city and state-level traffic trends, as well as related email threat volume in the weeks ahead of the game...
Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack
2023-02-13
This was a weekend of record-breaking DDoS attacks. Over the weekend, Cloudflare detected and mitigated dozens of hyper-volumetric DDoS attacks. The majority of attacks peaked in the ballpark of 50-70 million requests per second (rps) with the largest exceeding 71 million rps...
Welcome to Wildebeest: the Fediverse on Cloudflare
2023-02-08
Today we're announcing Wildebeest, an open-source, easy-to-deploy ActivityPub and Mastodon-compatible server built entirely on top of Cloudflare's Supercloud....
How Cloudflare erroneously throttled a customer’s web traffic
2023-02-07
Today’s post is a little different. It’s about a single customer’s website not working correctly because of incorrect action taken by Cloudflare....
Get notified about the most relevant events with Advanced HTTP Alerts
2023-02-03
Today we’re adding more flexibility to HTTP alerting, enabling customers to customize the types of activity they’re alerted on and how those alerts are organized....
Manage and control the use of dedicated egress IPs with Cloudflare Zero Trust
2023-02-03
Administrators can now use Gateway traffic egress policies to determine which egress IPs are used when....
Cloudflare's handling of a bug in interpreting IPv4-mapped IPv6 addresses
2023-02-02
Recently, a vulnerability was reported to our bug bounty about a bug in the way some of our code interprets IPv4 addresses mapped into IPv6 addresses. Read about how Cloudflare addressed this vulnerability and what will prevent similar exploits in the future....
Uptick in healthcare organizations experiencing targeted DDoS attacks
2023-02-02
Over the past few days, Cloudflare, as well as other sources, have observed healthcare organizations targeted by a pro-Russian hacktivist group claiming to be Killnet. ...
CVE-2022-47929: traffic control noqueue no problem?
2023-01-31
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands....
Towards a global framework for cross-border data flows and privacy protection
2023-01-27
In our third and final blog post leading up to Data Privacy Day, we drill down into the challenges for cross-border data flows, in particular personal data transfers from the EU to the US....
Inside Geo Key Manager v2: re-imagining access control for distributed systems
2023-01-27
Using the story of Geo Key Manager v2 as an example, let’s re-imagine access control for distributed systems using a variant of public-key cryptography, called attribute-based encryption....
Cyberattacks on Holocaust educational websites increased in 2022
2023-01-27
Today, 78 years after the liberation of the Auschwitz death camp, we mark the International Holocaust Remembrance Day. With Cloudflare’s Project Galileo, we protect Holocaust educational websites and at risk public interest groups. Read more to see how attacks on these groups increased in 2022....
Navigating the changing data localization landscape with Cloudflare’s Data Localization Suite
2023-01-26
We continue to expand and improve our data localization suite to help support our customers who have to comply with data localization requirements...
