Why we are acquiring Area 1
2022-02-23
Earlier today we announced that Cloudflare has agreed to acquire Area 1 Security...
Making protocols post-quantum
2022-02-23
Post-quantum key exchange and signature algorithms come with different trade-offs that we’re not used to. How do we handle that when updating protocols, and is this an opportunity to revisit the status quo?...
BGP security and confirmation biases
2022-02-23
On February 1, 2022, a configuration error on one of our routers caused a route leak of up to 2,000 Internet prefixes to one of our Internet transit providers. This leak lasted for 32 seconds and at a later time 7 seconds...
Deep dive into a post-quantum key encapsulation algorithm
2022-02-22
In this blog post, we will look at what Key Encapsulation Mechanisms are and why they matter in a post-quantum world...
Deep dive into a post-quantum signature scheme
2022-02-22
How can one attest to an identity and prove it belongs to one self? And how can one do it in the face of quantum computers? In this blog post, we examine these questions and explain what post-quantum signatures are...
Internet is back in Tonga after 38 days of outage
2022-02-22
Tonga, the South Pacific archipelago nation (with 169 islands), was reconnected to the Internet this early morning (UTC) and is back online after successful repairs to the undersea cable that was damaged on Saturday, January 15, 2022, by the January 14, volcanic eruption...
The post-quantum state: a taxonomy of challenges
2022-02-21
At Cloudflare, we strive to help build a better Internet, which means a quantum-protected one. In this post, we look at the challenges for migrating to post-quantum cryptography and what lies ahead using a taxonomy...
The quantum solace and spectre
2022-02-21
What is quantum computing and what advances have been made so far on this front? In this blog post, we will answer this question and see how to protect against quantum adversaries...
Detecting Magecart-Style attacks with Page Shield
2022-02-18
How we’re using content-based analysis to identify Magecart-style attacks...
Production ready eBPF, or how we fixed the BSD socket API
2022-02-17
We are open sourcing the production tooling we’ve built for the sk_lookup hook we contributed to the Linux kernel, called tubular...
Who won Super Bowl LVI? A look at Internet traffic during the big game
2022-02-14
By now, everyone knows that the Los Angeles Rams won, but we also want to look at which Super Bowl advertisers were the biggest winners, and how traffic to food delivery services, social media and messaging apps, and sports and betting websites changed throughout the game...
Cloudflare acquires Vectrix to expand Zero Trust SaaS security
2022-02-10
We are excited to share that Vectrix has been acquired by Cloudflare! Vectrix helps IT and security teams detect security issues across their SaaS applications...
Adding a CASB to Cloudflare Zero Trust
2022-02-10
Earlier today, Cloudflare announced that we have acquired Vectrix, a cloud-access security broker (CASB) company focused on solving the problem of control and visibility in the SaaS applications and public cloud providers that your team uses...
Email Routing is now in open beta, available to everyone
2022-02-08
Cloudflare Email Routing transitioned from closed beta to open beta. It’s now available to everyone, including free zones...
Slicing and Dicing Instant Logs: Real-time Insights on the Command Line
2022-02-07
Today, I am going to introduce you to Instant Logs in your terminal...
Missing Manuals - io_uring worker pool
2022-02-04
Chances are you might have heard of io_uring. It first appeared in Linux 5.1, back in 2019, and was advertised as the new API for asynchronous I/O. Its goal was to be an alternative to the deemed-to-be-broken-beyond-repair AIO, the “old” asynchronous I/O API...
Need to keep analytics data in the EU? Cloudflare Zaraz can offer a solution
2022-02-03
Zaraz offers a way to use tools like Google Analytics, but doing so with an approach that protects the privacy of personal information and keeps it in the EU...
How to stop running out of ephemeral ports and start to love long-lived connections
2022-02-02
Often programmers have assumptions that turn out, to their surprise, to be invalid. From my experience this happens a lot. Every API, technology or system can be abused beyond its limits and break in a miserable way...
Announcing the public launch of Cloudflare's bug bounty program
2022-02-01
Today we are launching Cloudflare’s paid public bug bounty program. We believe bug bounties are a vital part of every security team’s toolbox and have been working hard on improving and expanding our private bug bounty program over the last few years...
Cloudflare Partner Program Now Supports SASE & Zero Trust Managed Services
2022-01-31
We’ve been building out the Cloudflare Partner Network for years, working alongside businesses of all sizes and types including our world-wide system integrator partners ...
