A tool to spy on your DNS queries: dnspeep
A tool to spy on your DNS queries: dnspeep
Inside Cloudflare: Preventing Account Takeovers
Throughout the day, Cloudflare has published blog posts on products created to secure our customers from credential stuffing bots, detect users with compromised credentials, and block users from proxy services. But what do we do inside Cloudflare to prevent account takeovers on our own applications?
Advancing connectivity between the Asia-Pacific region and North America
We are announcing two vital new subsea cables to connect Singapore, Indonesia, and North America. These will be the first transpacific cables through a new diverse route crossing the Java Sea and will increase overall transpacific capacity by 70 percent. We are committed to bringing more people online to a faster internet. As part of […]
Protecting Cloudflare Customers from BGP Insecurity with Route Leak Detection
Today, we're excited to announce Route Leak Detection, a new network alerting feature that tells customers when a prefix they own that is onboarded to Cloudflare is being leaked.
Announcing Cloudflare’s Data Loss Prevention platform
Today, we’re excited to announce that your team can use Cloudflare’s network to build Zero Trust controls over the data in your enterprise - wherever it lives and however it moves.
Magic WAN & Magic Firewall: secure network connectivity as a service
Magic WAN provides secure, performant connectivity and routing for your entire corporate network, reducing cost and operational complexity.
Announcing Network On-ramp Partners for Cloudflare One
We know the promise of replacing MPLS links with a global, secure, performant and observable network is going to transform the corporate network and the industry itself.
Cutting Threads’ send latency in half
In 2019, Instagram launched a new app for direct messaging called Threads. We built media sends in Threads using a lot of the existing infrastructure at Instagram. Many of these components do not focus on the send latency. For this post, we’ll define “send latency” as the time it takes from when the user starts a […]
Sponsored Post: Kinsta, Bridgecrew, IP2Location, StackHawk, InterviewCamp.io, Educative, Stream, Fauna, Triplebyte - High Scalability -
Who's Hiring? * DevOps Engineer: At Kinsta, we set out to create the best managed hosting platform in the world. If you are an experienced DevOps Engineer who is constantly looking for ways to innovate and improve, we might just be the place for you! As Kinsta’s DevOps Engineer, you will be instrumental in making sure that our infrastructure is always on the bleeding edge of technology, remaining
Behind the feature: comments, contextually
How the team handled difficult interactions and edge cases to bring comments into the Figma Community
The benefits of serving stale DNS entries when using Consul
We use Consul for service discovery, and we’ve deployed a cluster that spans several of our data centers. We were aware from the start that the DNS query latencies were not great from certain parts of the world that were furthest away from these data centers.
A little tool to make DNS queries
A little tool to make DNS queries
DevTools Debugging Tips And Shortcuts (Chrome, Firefox, Edge) — Smashing Magazine
DevTools is very advanced and helpful, but can also be very intimidating and overwhelming. Let’s fix that. In this article, Vitaly reviews useful features and shortcuts for debugging in Chrome, Firefox, Edge and Safari.
Netlify Edge Handlers
Netlify Edge Handlers are in Early Access (you can request it), but they are super cool and I think they are worth wrapping your brain around now. I think
Internet traffic disruption caused by the Christmas Day bombing in Nashville
On Christmas Day 2020, an apparent suicide bomb exploded in Nashville, TN. The explosion happened outside an AT&T network building on Second Avenue in Nashville at 1230 UTC.
Life of an HTTP request in a Go server - Eli Bendersky's website
2020 year in review: Connectivity innovations, faster apps, and progress toward net zero
It goes without saying that 2020 has been a challenging year, to put it lightly. But if anything, the COVID-19 pandemic has shined a light on our need to connect as people. For Facebook, that meant our work has become more important than ever. Whether it was finding new and innovative ways to expand internet […]
Evenstar: The road to an alternative infra supply chain for RAN
Together with mobile network operators Airtel and Vodafone, and technology partners ADI, Altiostar, Baicells, Flex, Mavenir, MTI, Parallel Wireless, and Xilinx, we are focused on building general-purpose radio access network (RAN) reference designs for 4G and 5G networks in the Open RAN ecosystem. This work is being done as part of the Evenstar program. The […]
Trend data on the SolarWinds Orion compromise
Analyzing SUNBURST malware activity seen on Cloudflare’s public DNS resolver.
HTTP Archive’s Annual State of the Web Report
The HTTP Archive looked at more than 7 million websites and compiled their annual report detailing how the sites were built. And there’s an enormous wealth of
How to Build a Global Network that Complies with Local Law
Running a global network that complies with different privacy laws around the world requires coming back to the values that we have championed since our founding.
Cloudflare’s privacy-first Web Analytics is now available for everyone
Anyone can now sign up to use Cloudflare’s new privacy-first Web Analytics -- even without changing your DNS settings.
Improving DNS Privacy with Oblivious DoH in 1.1.1.1
Oblivious DoH (ODoH) makes secure DNS over HTTPS (DoH) queries into private queries which prevent the leakage of client IP addresses to resolvers. The new proposed ODoH standard addresses this problem and today we are enabling users to use this protocol with 1.1.1.1
SuperCell: Reaching new heights for wider connectivity
As part of our efforts to help expand connectivity around the world, Facebook Connectivity has been prototyping SuperCell, a wide-area coverage solution for increasing mobile connectivity in rural communities. Now, after working with telecom industry partners to conduct several trials and data analyses, we’re ready to share what we’ve learned. Rather than produce this solution […]
Improving the Resiliency of Our Infrastructure DNS Zone
We've improved the resiliency and management of our infrastructure DNS zone. In this post, we guide you through some of the "whats", "whys" and "hows" we encountered along the way.
ASICs at the Edge
At Cloudflare, we pride ourselves in our global network that spans more than 200 cities in over 100 countries. To accelerate all that traffic through our network, there are multiple technologies at play. So let’s have a look at one of the cornerstones that makes all of this work.
Many services, one cloudflared
Previously, if you wanted to proxy 100 services through Argo Tunnel, you needed 100 instances of cloudflared running on your server. Today, we’re thrilled to announce our most-requested feature: you can now expose unlimited services using one cloudflared.
The economic impact of subsea cables in Africa
High-quality internet connectivity gives people a voice, creates opportunities, and strengthens local and global economies. The need for widespread reliable internet connectivity and infrastructure is more apparent now than ever, as heavier reliance on remote work and online communication during the COVID-19 pandemic drives a dramatic surge in global internet usage. And yet, according to […] Read
Smashing Podcast Episode 29 With Leslie Cohn-Wein: How Does Netlify Dogfood The Jamstack? — Smashing Magazine
We’re asking what it looks like to dogfood the Jamstack at Netlify. Can you deploy an entire app to a CDN? Drew McLellan talks to Netlify Staff Engineer Leslie Cohn-Wein to find out.
Unwrap the SERVFAIL
We recently released a new version of Cloudflare Resolver, which adds a piece of information called “Extended DNS Errors” (EDE) along with the response code under certain circumstances. This will be helpful in tracing DNS resolution errors and figure out what went wrong behind the scenes.
A Last Call for QUIC, a giant leap for the Internet
QUIC and HTTP/3 are open standards that have been under development in the IETF for almost exactly 4 years. On October 21, 2020, following two rounds of Working Group Last Call, draft 32 of the family of documents that describe QUIC and HTTP/3 were put into IETF Last Call.
How we scale Live streaming for millions of viewers simultaneously
As Facebook Live and Facebook Watch have grown, the content shared there has expanded to include professionally produced, broadcast-quality content, like shows and live event coverage. This type of professional broadcasting from providers like La Liga, CONMEBOL, and UEFA is a very different challenge from user generated content (UGC) and viewers’ expectations are much higher. […]
Feedback: TCP lag, Mac crashes, site code, and octal dates
Introducing Magic Firewall
Today we’re excited to announce Magic Firewall™, a network-level firewall delivered through Cloudflare to secure your enterprise. Magic Firewall covers your remote users, branch offices, data centers and cloud infrastructure.
How our network powers Cloudflare One
Cloudflare's network is architected to solve the problems that face every organization trying to grow and protect a global network. With Cloudflare One, we're extending the advantage of these decisions to your company's network to help you solve them too.
How small businesses can start using Cloudflare One today
As a small business network administrator, there are fundamentally three things you need to protect: devices, applications, and the network itself. Here's how.
Introducing Cloudflare One Intel
Announcing the next phase of network and threat intelligence at Cloudflare.
Argo Tunnels that live forever
Securely connecting your infrastructure to Cloudflare's network just became easier.
GitHub Docs are now open source
Today, we’re excited to open source GitHub Docs at http://github.com/github/docs. Being a developer means always learning, and great docs can be like rocket fuel. They’re there when you need them,…
DNS Flag Day 2020
October 1 is DNS Flag Day, an initiative by the DNS community to make DNS more secure, reliable and robust. This year the focus is on problems around IP fragmentation of DNS packets.
Introducing API Shield
Of the 18 million requests per second that traverse Cloudflare’s network, 50% are directed towards APIs. Cloudflare is making it simple to secure APIs through the use of strong client certificate-based identity and strict schema-based validation.
Explaining Cloudflare's ABR Analytics
Cloudflare’s analytics products help customers answer questions about their traffic by analyzing the mind-boggling, ever-increasing number of events (HTTP requests, Workers requests, Spectrum events) logged by Cloudflare products every day.
Raking the floods: my intern project using eBPF
SYN-cookies help mitigating SYN-floods for TCP, but how can we protect services from similar attacks that use UDP? We designed an algorithm and a library to fill this gap, and it’s open source!
Throughput autoscaling: Dynamic sizing for Facebook.com
Facebook’s web tier is one of the main services that handle HTTP requests from people using our services each time they interact with Facebook. It is a massive global service distributed across multiple data centers throughout the world. Since we have people from all over the world using our services, the load on the web […]
Unimog - Cloudflare’s edge load balancer
Unimog is the Layer 4 Load Balancer for Cloudflare’s edge data centers. This post explains the problems it solves and how it works.
Using max() for an inner-element max-width
I go into all this in The "Inside" Problem. The gist: you want an edge-to-edge container, but the content inside to have a limited width. I think there is
Results of Oregon project environmental analysis
The Jupiter subsea cable is a transpacific cable that runs between Japan and the Philippines and the U.S., where it lands in Hermosa Beach, California, and Tierra del Mar, Oregon. During Facebook’s Oregon landing drilling operation in Tierra del Mar on April 28, an unfortunate incident occurred, in which a horizontal directional drill hit hard […]
The Serverlist: The Edge on Localhost, Micro API in Firebase and Workers, and more!
Check out our nineteenth edition of The Serverlist below. Get the latest scoop on the serverless space, get your hands dirty with new developer tutorials, engage in conversations with other serverless developers, and find upcoming meetups and conferences to attend.
Tracing at Slack: Thinking in Causal Graphs
“Why is it slow?” is the hardest problem to debug in a complex distributed system like Slack. To diagnose a slow-loading channel with over a hundred thousand users, we’d need to look at client-side metrics, server-side metrics, and logs. It could be a client-side issue: a slow network connection or hardware. On the other hand,…
Cloudflare and Human Rights: Joining the Global Network Initiative (GNI)
We are excited to announce that we have joined the Global Network Initiative (GNI), one of the world's leading human rights organizations in the information and communications Technology (ICT) sector,
Announcing wrangler dev — the Edge on localhost
A few weeks ago we announced a release candidate for wrangler dev — today, we're excited to take wrangler dev, the world’s first edge-based development environment, to GA with the release of wrangler 1.11.
Improving the Wrangler Startup Experience
You can now write any behaviour on requests heading to your site or even run fully fledged applications directly on the edge. Wrangler is the open-source CLI tool used to manage your Workers and has a big focus on enabling a smooth developer experience.
Orange Clouding with Secondary DNS
Secondary DNS Override is a great option for any users that want to take advantage of the Cloudflare network, without transferring all of their zones to Cloudflare DNS as a primary provider.
Protecting Remote Desktops at Scale with Cloudflare Access
Today we are announcing Argo Tunnel RDP Bastion mode, a simpler way to protect RDP connections at scale. By functioning as a jump-host, cloudflared can reside on a single node in your network and proxy requests to any internal server, eliminating deployment headaches.
Using DNS Traffic Management to Add Resiliency to Shopify’s Services - Shopify
If you are lacking understanding of what is DNS, traffic management, or why we would even use it, read Part 1: Introduction to DNS traffic management. Distributed systems are only as resilient as we build them to be. Domain Name System (DNS) traffic management (TM) is a well-used approach to do so. In this second part of the two-part series, we’re sharing Shopify’s DNS traffic management journey f
An Introduction to DNS Traffic Management - Shopify
Distributed systems are only as resilient as we build them to be. Domain Name System (DNS) traffic management is a well-used approach to do so. In this first part of a two-part series, we aim to give a broad overview of DNS and how it’s used for traffic management, as well as the different reasons why we want to use DNS traffic management. If you already have context on what is DNS, what is traffi
Introducing Cloudflare Network Interconnect
We’re excited to announce Cloudflare Network Interconnect (CNI). CNI allows customers to connect branch and HQ locations with Cloudflare wherever they are.
Cloudflare Network Interconnection partnerships launch
Today we’re excited to announce Cloudflare’s Network Interconnection Partner Program, in support of our new CNI product. As ever more enterprises turn to Cloudflare to secure and accelerate their branch and core networks, the ability to connect privately and securely becomes increasingly important.
The Edge Computing Opportunity: It’s Not What You Think
Cloudflare Workers® is one of the largest, most widely used edge computing platforms. We announced Cloudflare Workers nearly three years ago and it's been generally available for the last two years.
Introducing IP Lists
IP Lists can now be stored with metadata at the Cloudflare edge, replicated within seconds to our data centers in 200+ cities, and used as part of our powerful, expressive Firewall Rules engine to take action on incoming requests.