Recycling memory buffers in Go
August 24, 2013 1:46 AM
This blog post is very old now. You probably don't want to use the techniques described here. GO'S sync.Pool is a better way to go....
CloudFlare's new WAF: compiling to Lua
August 23, 2013 5:31 AM
We use nginx throughout our network for front-line web serving, proxying and traffic filtering. In some cases, we've augmented the core C code of nginx with our own modules, but recently we've made a major move to using Lua in conjunction with nginx. One project that's now almost entirely written in Lua is the new CloudFlare WAF that we blogged about the other day. The Lua WAF uses the nginx Lua module to embed Lua code and execute that code as part of the normal nginx handling of phases....
Heuristics and Rules: Why We Built a New Old WAF
August 19, 2013 6:00 AM
We just rolled out an update to CloudFlare's Web Application Firewall (WAF). Previously, CloudFlare's WAF has received criticism from people who have tested it and found that it didn't behave as traditional WAFs are expected to. ...
DDoS Prevention: Protecting The Origin
July 30, 2013 8:20 AM
One of the many great features that CloudFlare provides is protection from Distributed Denial of Service (DDoS) attacks. A malicious party who wants to make your website or web service unavailable could try to overwhelm it with requests from compromised machines (or bots) all around the world. ...
A Tour Inside CloudFlare's Latest Generation Servers
July 22, 2013 8:30 AM
CloudFlare operates at a significant scale, handling more than a trillion requests through our network every month. ...
MORE POSTS
April 11, 2013 9:23 PM
Patching the Internet in Realtime: Fixing the Current WordPress Brute Force Attack
There is currently a significant attack being launched at a large number of WordPress blogs across the Internet. The attacker is brute force attacking the WordPress administrative portals, using the username "admin" and trying thousands of passwords. ...
- By
April 08, 2013 7:18 AM
How the CloudFlare Team Got Into Bondage (It's Not What You Think)
At CloudFlare, we're always looking for ways to eliminate bottlenecks. We're only able to deal with the very large amount of traffic that we handle because we've built a network that can efficiently handle an extremely high volume of network requests. ...
- By
March 27, 2013 4:35 PM
The DDoS That Almost Broke the Internet
The New York Times this morning published a story about the Spamhaus DDoS attack and how CloudFlare helped mitigate it and keep the site online. The Times calls the attack the largest known DDoS attack ever on the Internet....
- By
March 20, 2013 6:26 PM
The DDoS That Knocked Spamhaus Offline (And How We Mitigated It)
At CloudFlare, we deal with large DDoS attacks every day. Usually, these attacks are directed at large companies or organizations that are reluctant to talk about their details. Sometimes a customer is willing to let us tell their story....
- By
March 13, 2013 4:52 PM
Cloudflare Keeps TheBayLights.org Running Bright
When you think of San Francisco, undoubtedly one bridge in particular comes to mind - The Golden Gate Bridge....
- By
March 06, 2013 5:43 PM
Load Balancing without Load Balancers
CloudFlare had an hour-long outage this last weekend. Thankfully, outages like this have been a relatively rare occurrance for our service. ...
- By
February 22, 2013 9:12 PM
Good Web Security News: Open DNS Resolvers Are Getting Closed
This has been a rough week in the security industry with big attacks and compromises reported at companies from Facebook to Apple. ...
- By
February 14, 2013 1:29 AM
When the Attackers Name Malware After You, You Know You're Doing Something Right
CloudFlare's I'm Under Attack Mode (IUAM) is elegantly simple. When a site is under an application layer (Layer 7) distributed denial of service (DDoS) attack, the mode will return a challenge page to a visitor. ...
- By
December 21, 2012 3:41 AM
Hackers love the holidays
Looking at the latest DDoS attack statistics from CloudFlare's network, it seems that hackers love the holidays....
- By
November 27, 2012 11:49 PM
Ceasefires Don't End Cyberwars
There is a significant conflict in the Middle East. As has been widely reported, along with the physical confrontation between the Israelis and Palestinians, there have been widespread cyber attacks....
- By
November 06, 2012 9:09 AM
Why Google Went Offline Today and a Bit about How the Internet Works
Today, Google's services experienced a limited outage for about 27 minutes over some portions of the Internet. The reason this happened dives into the deep, dark corners of networking. ...
- By
October 31, 2012 1:04 AM
What Happens When a Hurricane Hits the Web
Now that Hurricane Sandy has passed and the flood waters have begun to recede, we wanted to recap what we saw over the last 24 hours across the CloudFlare network....
- By
October 30, 2012 7:54 AM
Deep Inside a DNS Amplification DDoS Attack
A few weeks ago I wrote about DNS Amplification Attacks. These attacks are some of the largest, as measured by the number of Gigabits per second (Gbps), that we see directed toward our network....
- By
October 28, 2012 8:27 PM
Sandy, Meet CloudFlare
There is a large hurricane in the Atlantic Ocean which is likely to come on-shore in the Eastern United States late tomorrow. Dubbed Sandy, the current track of the hurricane has it making landfall around Philadelphia, Pennsylvania....
- By