Subscribe to receive notifications of new posts:

Wow, That's Fast! Instant DNS Updates and More...

2011-11-08

1 min read
Wow, That's Fast! Instant DNS Updates and More...

At CloudFlare, we're constantly trying to make things faster. To give you a sense, at our current scale, for every 1 millisecond (1/1000th of a second) we remove from requests through our network, we save a lifetime (70 years) worth of time every year. You can get a sense of this scale just by staring at the roughly realtime stats on our network map, which I find literally mindboggling.

With our new SSL rollout we worked hard to improve how some processes updated. In order to get certificates deployed to our network as quickly as possible, we built a new, scalable, key-value based file system we call KTFS. It allows us to make a change in one location and have it branch out to our entire network following a tree-like path, much like how BitTorrent distributes files. That means when you sign up for a paid plan on CloudFlare, your SSL will work network-wide less than a minute after the certificate is issued. And KTFS is built to gracefully scale as we continue to add new data centers -- and we're planning on adding lots of data centers.

In the process of building this for SSL provisioning, what we realized was that KTFS also gave us the ability to make other processes much faster and more robust as well. With little fanfare, a few weeks ago we turned it on so that DNS updates are pushed out more quickly. Where the process previously took about five minutes -- which was pretty good compared with other massively distributed DNS systems -- we're now down to less than a minute from when you make a change to your DNS settings to when it is live across the 12 (soon to be 14) data centers in our Anycasted DNS network.

Like SortaSQL and some of the other core technologies we've developed, KTFS provides a platform that allows us to continue to grow CloudFlare's platform to help power a faster, safer Internet for everyone.

Cloudflare's connectivity cloud protects entire corporate networks, helps customers build Internet-scale applications efficiently, accelerates any website or Internet application, wards off DDoS attacks, keeps hackers at bay, and can help you on your journey to Zero Trust.

Visit 1.1.1.1 from any device to get started with our free app that makes your Internet faster and safer.

To learn more about our mission to help build a better Internet, start here. If you're looking for a new career direction, check out our open positions.
DNSProduct NewsSpeed & ReliabilityReliability

Follow on X

Matthew Prince|@eastdakota
Cloudflare|@cloudflare

Related posts

April 22, 2026

Making Rust Workers reliable: panic and abort recovery in wasm‑bindgen

Panics in Rust Workers were historically fatal, poisoning the entire instance. By collaborating upstream on the wasm‑bindgen project, Rust Workers now support resilient critical error recovery, including panic unwinding using WebAssembly Exception Handling....

April 20, 2026

The AI engineering stack we built internally — on the platform we ship

We built our internal AI engineering stack on the same products we ship. That means 20 million requests routed through AI Gateway, 241 billion tokens processed, and inference running on Workers AI, serving more than 3,683 internal users. Here's how we did it. ...

April 20, 2026

Building the agentic cloud: everything we launched during Agents Week 2026

Agents Week 2026 is a wrap. Let’s take a look at everything we announced, from compute and security to the agent toolbox, platform tools, and the emerging agentic web. Everything we shipped for the agentic cloud. ...