Good News: Vulnerable NTP Servers Closing Down
February 23, 2014
On Monday, February 10th, CloudFlare experienced a large DDoS attack, with nearly 400Gbps of NTP attack traffic hitting our network. ...
Technical Details Behind a 400Gbps NTP Amplification DDoS Attack
February 13, 2014
On Monday we mitigated a large DDoS that targeted one of our customers. The attack peaked just shy of 400Gbps. We've seen a handful of other attacks at this scale, but this is the largest attack we've seen that uses NTP amplification....
CloudFlare DNS is simple, fast and flexible
January 30, 2014
Over the past few years, the CloudFlare blog has covered a great range of different topics, drilling down into the technology we use to both protect websites from attack, and optimise them so that they load faster for visitors....
2013: Rebuild the Engine; 2014: Step on the Gas
December 31, 2013
It's been a busy 2013 here at CloudFlare. By all external measures it was a terrific year. We grew page views, revenue and traffic across our network – all by more than 400%. We added terrific partners and high profile customers. ...
What we've been doing with Go
November 11, 2013
Almost two years ago CloudFlare started working with Go. What started as an experiment on one network and concurrency heavy project has turned into full, production use of Go for multiple services....
MORE POSTS
August 27, 2013
The story of a little DNS easter egg
About a year ago, we realized that CloudFlare's current DNS infrastructure had some challenges. We were using PowerDNS, an open source DNS server that is popular with hosting providers. ...
- By
August 24, 2013
Recycling memory buffers in Go
This blog post is very old now. You probably don't want to use the techniques described here. GO'S sync.Pool is a better way to go....
- By
August 23, 2013
CloudFlare's new WAF: compiling to Lua
We use nginx throughout our network for front-line web serving, proxying and traffic filtering. In some cases, we've augmented the core C code of nginx with our own modules, but recently we've made a major move to using Lua in conjunction with nginx. One project that's now almo...
- By
August 19, 2013
Heuristics and Rules: Why We Built a New Old WAF
We just rolled out an update to CloudFlare's Web Application Firewall (WAF). Previously, CloudFlare's WAF has received criticism from people who have tested it and found that it didn't behave as traditional WAFs are expected to. ...
- By
July 30, 2013
DDoS Prevention: Protecting The Origin
One of the many great features that CloudFlare provides is protection from Distributed Denial of Service (DDoS) attacks. A malicious party who wants to make your website or web service unavailable could try to overwhelm it with requests from compromised machines (or bots) all aro...
- By
July 22, 2013
A Tour Inside CloudFlare's Latest Generation Servers
CloudFlare operates at a significant scale, handling more than a trillion requests through our network every month. ...
- By
June 06, 2013
Happy IPv6 Day: Usage On the Rise, Attacks Too
June 6th is known as World IPv6 Day so we thought it was a good time to look at the trends in IPv6 usage across CloudFlare's network. ...
- By
April 11, 2013
Patching the Internet in Realtime: Fixing the Current WordPress Brute Force Attack
There is currently a significant attack being launched at a large number of WordPress blogs across the Internet. The attacker is brute force attacking the WordPress administrative portals, using the username "admin" and trying thousands of passwords. ...
- By
April 08, 2013
How the CloudFlare Team Got Into Bondage (It's Not What You Think)
At CloudFlare, we're always looking for ways to eliminate bottlenecks. We're only able to deal with the very large amount of traffic that we handle because we've built a network that can efficiently handle an extremely high volume of network requests. ...
- By
March 27, 2013
The DDoS that almost broke the Internet
The New York Times this morning published a story about the Spamhaus DDoS attack and how CloudFlare helped mitigate it and keep the site online. The Times calls the attack the largest known DDoS attack ever on the Internet....
- By
March 20, 2013
The DDoS That Knocked Spamhaus Offline (And How We Mitigated It)
At CloudFlare, we deal with large DDoS attacks every day. Usually, these attacks are directed at large companies or organizations that are reluctant to talk about their details. Sometimes a customer is willing to let us tell their story....
- By
March 13, 2013
Cloudflare Keeps TheBayLights.org Running Bright
When you think of San Francisco, undoubtedly one bridge in particular comes to mind - The Golden Gate Bridge....
- By
March 06, 2013
Load Balancing without Load Balancers
CloudFlare had an hour-long outage this last weekend. Thankfully, outages like this have been a relatively rare occurrance for our service. ...
- By
February 22, 2013
Good Web Security News: Open DNS Resolvers Are Getting Closed
This has been a rough week in the security industry with big attacks and compromises reported at companies from Facebook to Apple. ...
- By