Techreport blog

Engineering Insights & Guides

The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.

11,670 articles
Security — Updates to Cloudflare Security and Privacy Certifications and Reports

Updates to Cloudflare Security and Privacy Certifications and Reports

Customer confidence in our ability to handle their sensitive information in an ever-changing regulatory landscape has to be as solid as our offerings, so we have expanded the scope of our previously-existing compliance validations; not only that, we’ve also managed to obtain a couple of new ones.

CCloudflare·December 11, 2021Security
Engineering — What’s new with Notifications?

What’s new with Notifications?

We know that notifications are incredibly important to our customers. Cloudflare sits in between your Internet property and the rest of the world. When something goes wrong, you want to know right away because it could have a huge impact on your end users.

NNatashaNatasha·December 11, 2021Engineering
Security — How Cloudflare security responded to Log4j 2 vulnerability

How Cloudflare security responded to Log4j 2 vulnerability

Yesterday, December 9, 2021, when a serious vulnerability in the popular Java-based logging package log4j was publicly disclosed, our security teams jumped into action to help respond to the first question and answer the second question. This post explores the second.

RTRushil, Thomas CalderonRushil, Thomas Calderon·December 10, 2021Security
Security — Actual CVE-2021-44228 payloads captured in the wild

Actual CVE-2021-44228 payloads captured in the wild

I wrote earlier about how to mitigate CVE-2021-44228 in Log4j, how the vulnerability came about and Cloudflare’s mitigations for our customers. As I write we are rolling out protection for our FREE customers as well because of the vulnerability’s severity.

JGJohn Graham CummingJohn Graham Cumming·December 10, 2021Security
Networking — Argo for Packets is Generally Available

Argo for Packets is Generally Available

Today, we’re announcing the general availability of Argo for Packets, which provides IP layer network optimizations to supercharge your Cloudflare network services products.

TTubesTubes·December 10, 2021Networking
Security — Secure how your servers connect to the Internet today

Secure how your servers connect to the Internet today

The vulnerability disclosed yesterday in the Java-based logging package, log4j, allows attackers to execute code on a remote server. We’ve updated Cloudflare’s WAF to defend your infrastructure against this 0-day attack.

SSamSam·December 10, 2021Security
Security — Introducing Cloudflare Security Center

Introducing Cloudflare Security Center

We're launching Security Center, making attack surface management actionable and accessible, built on Cloudflare’s unique visibility into Internet activity and expertise on security best practices.

MMalavikaMalavika·December 9, 2021Security
Security — Magic Firewall gets Smarter

Magic Firewall gets Smarter

To improve security, we’re adding threat intel integration and geo-blocking. For visibility, we’re packet captures at the edge, a way to see packets arrive at the edge in near real-time.

CCloudflare·December 9, 2021Security
Engineering — Introducing stack graphs

Introducing stack graphs

Precise code navigation is powered by stack graphs, a new open source framework that lets you define the name binding rules for a programming language.

DCDouglas CreagerDouglas Creager·December 9, 2021Engineering