New Zero Trust navigation coming soon (and we need your feedback)
2023-03-07
The Zero Trust dashboard navigation will be getting a visual refresh on March 20, 2023. ...
The White House’s National Cybersecurity Strategy asks the private sector to step up to fight cyber attacks. Cloudflare is ready
2023-03-07
The White House released the National Cybersecurity Strategy aimed at securing the Internet. Cloudflare welcomes the Strategy, and congratulates the White House on this much-needed policy initiative. ...
How Cloudflare runs Prometheus at scale
2023-03-03
Here at Cloudflare we run over 900 instances of Prometheus with a total of around 4.9 billion time series. Operating such a large Prometheus deployment doesn’t come without challenges . In this blog post we’ll cover some of the issues we hit and how we solved them...
Oxy is Cloudflare's Rust-based next generation proxy framework
2023-03-02
In this blog post, we are proud to introduce Oxy - our modern proxy framework, developed using the Rust programming language...
How we built an open-source SEO tool using Workers, D1, and Queues
2023-03-02
In this blog post, I’m excited to show off some of the new tools in Cloudflare’s developer arsenal, D1 and Queues, to prototype and ship an internal tool for our SEO experts at Cloudflare....
How Rust and Wasm power Cloudflare's 1.1.1.1
2023-02-28
Introducing a new DNS platform that powers 1.1.1.1 and various other products....
ROFL with a LOL: rewriting an NGINX module in Rust
2023-02-24
Engineers at Cloudflare have written a replacement in Rust for one of the oldest and least-well understood parts of the Cloudflare infrastructure, cf-html, which is an NGINX module. In doing so we learned a lot about how NGINX works, and paved the way to move away from NGINX entirely....
One year of war in Ukraine: Internet trends, attacks, and resilience
2023-02-23
This blog post reports on Internet insights during an historical war in Europe that has been seen and shared online, and discusses how Ukraine's Internet remained resilient in spite of dozens of disruptions in three different stages of the conflict....
The Chief Zero Trust Officer: a new role for a new era of cybersecurity
2023-02-21
Implementing Zero Trust can be challenging, and efforts may stall. The need for a Chief Zero Trust Officer (CZTO) is driven by the increasing importance of Zero Trust security in the face of escalating cyber attacks....
So long, and thanks for all the deployments: deprecating Wrangler v1
2023-02-16
Version 1 of Wrangler has served us well for years. But with a new major version to focus on, it’s time to say goodbye...
A look at Internet traffic trends during Super Bowl LVII
2023-02-13
We look at who the biggest winners were among Super Bowl advertisers, and examine traffic trends for food delivery services, social media, and sports and betting sites. We also review city and state-level traffic trends, as well as related email threat volume in the weeks ahead of the game...
Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack
2023-02-13
This was a weekend of record-breaking DDoS attacks. Over the weekend, Cloudflare detected and mitigated dozens of hyper-volumetric DDoS attacks. The majority of attacks peaked in the ballpark of 50-70 million requests per second (rps) with the largest exceeding 71 million rps...
Welcome to Wildebeest: the Fediverse on Cloudflare
2023-02-08
Today we're announcing Wildebeest, an open-source, easy-to-deploy ActivityPub and Mastodon-compatible server built entirely on top of Cloudflare's Supercloud....
How Cloudflare erroneously throttled a customer’s web traffic
2023-02-07
Today’s post is a little different. It’s about a single customer’s website not working correctly because of incorrect action taken by Cloudflare....
Get notified about the most relevant events with Advanced HTTP Alerts
2023-02-03
Today we’re adding more flexibility to HTTP alerting, enabling customers to customize the types of activity they’re alerted on and how those alerts are organized....
Manage and control the use of dedicated egress IPs with Cloudflare Zero Trust
2023-02-03
Administrators can now use Gateway traffic egress policies to determine which egress IPs are used when....
Cloudflare's handling of a bug in interpreting IPv4-mapped IPv6 addresses
2023-02-02
Recently, a vulnerability was reported to our bug bounty about a bug in the way some of our code interprets IPv4 addresses mapped into IPv6 addresses. Read about how Cloudflare addressed this vulnerability and what will prevent similar exploits in the future....
Uptick in healthcare organizations experiencing targeted DDoS attacks
2023-02-02
Over the past few days, Cloudflare, as well as other sources, have observed healthcare organizations targeted by a pro-Russian hacktivist group claiming to be Killnet. ...
CVE-2022-47929: traffic control noqueue no problem?
2023-01-31
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands....
Towards a global framework for cross-border data flows and privacy protection
2023-01-27
In our third and final blog post leading up to Data Privacy Day, we drill down into the challenges for cross-border data flows, in particular personal data transfers from the EU to the US....
