Almost nine years ago, Cloudflare was a tiny company and I was a customer not an employee. Cloudflare had launched a month earlier and one day alerting told me that my little site, jgc.org, didn’t seem to have working DNS any more....
July 02, 2019 3:50PM
Cloudflare outage caused by bad software deploy (updated)
Post Mortem Outage Deep DiveStarting at 1342 UTC today we experienced a global outage across our network that resulted in visitors to Cloudflare-proxied domains being shown 502 errors (“Bad Gateway”). The cause of this outage was deployment of a single misconfigured rule within the Cloudflare Web Application Firewall (WAF)...
June 26, 2019 10:22PM
The deep-dive into how Verizon and a BGP Optimizer Knocked Large Parts of the Internet Offline Monday
RPKI BGP Deep Dive Post MortemOn Monday we wrote about a painful Internet wide route leak. We wrote that this should never have happened because Verizon should never have forwarded those routes to the rest of the Internet. Today we will dive into the archived routing data and analyze it....
June 01, 2018 1:13AM
Today we mitigated 1.1.1.1
Reliability Post Mortem Mitigation 1.1.1.1 DNSCloudflare is protected from attacks by the Gatebot DDoS mitigation pipeline. Gatebot performs hundreds of mitigations a day, shielding our infrastructure and our customers from L3 and L7 attacks....
March 01, 2017 3:27PM
Quantifying the Impact of "Cloudbleed"
Bugs Post Mortem Privacy SecurityLast Thursday we released details on a bug in Cloudflare's parser impacting our customers. It was an extremely serious bug that caused data flowing through Cloudflare's network to be leaked onto the Internet....
More Posts
February 23, 2017 11:01PM
Incident report on memory leak caused by Cloudflare parser bug
Last Friday, Tavis Ormandy from Google’s Project Zero contacted Cloudflare to report a security problem with our edge servers. He was seeing corrupted web pages being returned by some HTTP requests run through Cloudflare....
-
By