The end of the road for Server: cloudflare-nginx
2017-12-11
Six years ago when I joined Cloudflare the company had a capital F, about 20 employees, and a software stack that was mostly NGINX, PHP and PowerDNS (there was even a little Apache). ...
Introducing the Cloudflare Warp Ingress Controller for Kubernetes
2017-12-05
It’s ironic that the one thing most programmers would really rather not have to spend time dealing with is... a computer. ...
Cloudflare’s Super Secret Plan, or why we acquired Neumob
2017-11-14
We announced today that Cloudflare has acquired Neumob. Neumob’s team built exceptional technology to speed up mobile apps, reduce errors on challenging mobile networks, and increase conversions. ...
Code Everywhere: Why We Built Cloudflare Workers
2017-09-29
Birthday WeekProduct NewsJavaScriptDevelopersServerlessCloudflare WorkersProgrammingDeveloper Platform
It all comes down to the speed of light. It always does. The speed of light limits the latency possible between someone using the Internet and the application they are accessing. ...
No Scrubs: The Architecture That Made Unmetered Mitigation Possible
2017-09-25
When building a DDoS mitigation service it’s incredibly tempting to think that the solution is scrubbing centers or scrubbing servers. I, too, thought that was a good idea in the beginning, but experience has shown that there are serious pitfalls to this approach....
Three little tools: mmsum, mmwatch, mmhistogram
2017-07-04
In a recent blog post, my colleague Marek talked about some SSDP-based DDoS activity we'd been seeing recently. In that blog post he used a tool called mmhistogram to output an ASCII histogram....
Incident report on memory leak caused by Cloudflare parser bug
2017-02-23
Last Friday, Tavis Ormandy from Google’s Project Zero contacted Cloudflare to report a security problem with our edge servers. He was seeing corrupted web pages being returned by some HTTP requests run through Cloudflare....
How and why the leap second affected Cloudflare DNS
2017-01-01
At midnight UTC on New Year’s Day, deep inside Cloudflare’s custom RRDNS software, a number went negative when it should always have been, at worst, zero. A little later this negative value caused RRDNS to panic. ...
2017 and the Internet: our predictions
2016-12-30
Looking back over 2016, we saw the good and bad that comes with widespread use and abuse of the Internet. ...
The Daily DDoS: Ten Days of Massive Attacks
2016-12-02
Back in March my colleague Marek wrote about a Winter of Whopping Weekend DDoS Attacks where we were seeing 400Gbps attacks occurring mostly at the weekends. We speculated that attackers were busy with something else during the week....
How the Dyn outage affected Cloudflare
2016-10-27
Last Friday the popular DNS service Dyn suffered three waves of DDoS attacks that affected users first on the East Coast of the US, and later users worldwide. ...
Fixing the mixed content problem with Automatic HTTPS Rewrites
2016-09-22
Long ago it was difficult, expensive, and slow to set up an HTTPS capable web site. Then along came services like CloudFlare’s Universal SSL that made switching from http:// to https:// as easy as clicking a button. ...
Welcoming Sir Tim Berners-Lee to the CloudFlare Internet Summit
2016-09-13
This Thursday, September 15, we are holding our second Internet Summit at our offices in San Francisco. We have a fascinating lineup of speakers covering policy, technology, privacy, and business....
After 4 days, Gabon is getting back on the Internet (updated)
2016-09-05
On September 1, we reported that we had seen a complete shutdown of Internet access to CloudFlare sites from Gabon....
Unrest in Gabon leads to Internet shutdown (updated)
2016-09-01
A second day of rioting in Gabon after the recent election is accompanied by an Internet blackout. Residents of the capital, Libreville, reported that Internet access had been cut and we can confirm that we saw a sudden shutdown of Internet access from Gabon to sites that use CloudFlare....
Evenly Distributed Future
2016-08-22
Traveling back and forth between the UK and US I often find myself answering the question “What does CloudFlare do?”. That question gets posed by USCIS on arrival and I’ve honed a short and accurate answer. ...
The Cuban CDN
2016-08-18
On a recent trip to Cuba I brought with me a smartphone and hoped to get Internet access either via WiFi or 3G. I managed that (at a price) but also saw for myself how Cubans get access to an alternate Internet delivered by sneakernet....
HTTP/2 Server Push with multiple assets per Link header
2016-06-30
In April we announced that we had added experimental support for HTTP/2 Server Push to all CloudFlare web sites. We did this so that our customers could iterate on this new functionality. ...
Optimizing TLS over TCP to reduce latency
2016-06-10
The layered nature of the Internet (HTTP on top of some reliable transport (e.g. TCP), TCP on top of some datagram layer (e.g. IP), IP on top of some link (e.g. Ethernet)) has been very important in its development. ...
The Sleepy User Agent
2016-05-17
From time to time a customer writes in and asks about certain requests that have been blocked by the CloudFlare WAF. Recently, a customer couldn’t understand why it appeared that some simple GET requests for their homepage were listed as blocked in WAF analytics....