Tales from the Crypt(o team)
2019-10-27
Halloween season is upon us. This week we’re sharing a series of blog posts about work being done at Cloudflare involving cryptography, one of the spookiest technologies around....
Public keys are not enough for SSH security
2019-10-25
If your organization uses SSH public keys, it’s entirely possible you have already lost one. There is a file sitting in a backup or on a former employees computer which grants the holder access to your infrastructure....
Cloudflare response to CPDoS exploits
2019-10-24
Three vulnerabilities were disclosed as Cache Poisoning Denial of Service attacks in a paper written by Hoai Viet Nguyen, Luigi Lo Iacono, and Hannes Federrath of TH Köln - University of Applied Sciences. These attacks are similar to the cache poisoning attacks presented last year at DEFCON....
Who DDoS'd Austin?
2019-10-24
It was a scorching Monday on July 22 as temperatures soared above 37°C (99°F) in Austin, TX, the live music capital of the world. Only hours earlier, the last crowds dispersed from the historic East 6th Street entertainment district. ...
Experiment with HTTP/3 using NGINX and quiche
2019-10-17
Just a few weeks ago we announced the availability on our edge network of HTTP/3, the new revision of HTTP intended to improve security and performance on the Internet. Everyone can now enable HTTP/3 on their Cloudflare zone...
It's crowded in here
2019-10-12
We recently gave a presentation on Programming socket lookup with BPF at the Linux Plumbers Conference 2019 in Lisbon, Portugal. This blog post is a recap of the problem statement and proposed solution we presented....
What's it like to come out as LGBTQIA+ at work?
2019-10-11
Today is the 31st Anniversary of National Coming Out Day. We wanted to highlight the importance of this day, share coming out resources, and publish some stories of what it's like to come out in the workplace....
Good Morning, Jakarta!
2019-10-11
Beneath the veneer of glass and concrete, this is a city of surprises and many faces. On 3rd October 2019, we brought together a group of leaders from across a number of industries to connect in Central Jakarta, Indonesia. ...
Terraforming Cloudflare: in quest of the optimal setup
2019-10-09
This post is about our introductive journey to the infrastructure-as-code practice; managing Cloudflare configuration in a declarative and version-controlled way....
Talk Transcript: How Cloudflare Thinks About Security
2019-10-08
This is the text I used for a talk at artificial intelligence powered translation platform, Unbabel, in Lisbon on September 25, 2019....
The Serverlist: Static sites, serverless costs, and more
2019-10-02
Check out our eighth edition of The Serverlist below. Get the latest scoop on the serverless space, get your hands dirty with new developer tutorials, engage in conversations with other serverless developers, and find upcoming meetups and conferences to attend....
Learn more about Workers Sites at Austin & San Francisco Meetups
2019-10-02
Last Friday, at the end of Cloudflare’s 9th birthday week, we announced Workers Sites. Now, using the Wrangler CLI, you can deploy entire websites directly to the Cloudflare Network using Cloudflare Workers and Workers KV....
Not so static... Introducing the HTMLRewriter API Beta to Cloudflare Workers
2019-09-30
Today, we’re excited to announce HTMLRewriter beta — a streaming HTML parser with an easy to use selector based JavaScript API for DOM manipulation, available in the Cloudflare Workers runtime....
¡Bienvenidos a Latinflare!
2019-09-30
When I first began interviewing with Cloudflare in the Spring of 2019, I came across a Cloudflare blog post announcing Proudflare, the company’s LGBTQIA+ Employee Resource Group (ERG). ...
Cloudflare’s protection against a new Remote Code Execution vulnerability (CVE-2019-16759) in vBulletin
2019-09-28
Cloudflare has released a new rule as part of its Cloudflare Specials Rulesets, to protect our customers against a high-severity vulnerability in vBulletin. A new zero-day vulnerability was discovered for vBulletin, a proprietary Internet forum software. ...
Birthday Week 2019 Wrap-up
2019-09-27
Birthday WeekProduct NewsSecurityAnalytics1.1.1.1WARPCloudflare WorkersServerlessHTTP3Speed & ReliabilityDevelopersDeveloper Platform
This week we celebrated Cloudflare’s 9th birthday by launching a variety of new offerings that support our mission: to help build a better Internet. Below is a summary recap of how we celebrated Birthday Week 2019....
Workers Sites: Extending the Workers platform with our own serverless building blocks
2019-09-27
As of today, with the Wrangler CLI, you can now deploy entire websites directly to Cloudflare Workers and Workers KV. ...
Workers Sites: Deploy Your Website Directly on our Network
2019-09-27
Birthday WeekProduct NewsCloudflare WorkersServerlessJavaScriptCloudflare Workers KVDevelopersDeveloper Platform
Performance on the web has always been a battle against the speed of light — accessing a site from London that is served from Seattle, WA means every single asset request has to travel over seven thousand miles....
HTTP/3: the past, the present, and the future
2019-09-26
We are now happy to announce that QUIC and HTTP/3 support is available on the Cloudflare edge network. We’re excited to be joined in this announcement by Google Chrome and Mozilla Firefox, two of the leading browser vendors and partners in our effort to make the web faster and more reliable for all....
WARP is here (sorry it took so long)
2019-09-25
Today, after a longer than expected wait, we're opening WARP and WARP+ to the general public. If you haven’t heard about it yet, WARP is a mobile app designed for everyone which uses our global network to secure all of your phone’s Internet traffic....
