
Welcome to the 22nd edition of the Cloudflare DDoS Threat Report. Published quarterly, this report offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network. In this edition, we focus on the second quarter of 2025.

On July 14th, 2025, Cloudflare made a change to our service topologies that caused an outage for 1.1.1.1 on the edge, resulting in downtime for 62 minutes for customers using the 1.1.1.1 public DNS Resolver as well as intermittent degradation of service for Gateway DNS. We’re deeply sorry for this outage. This outage was the result of an internal configuration error and not the result of an attack
AP
Ash Pallarito, Joe Abley·July 15, 2025Security 
Gartner has recognized Cloudflare as a Visionary in the 2025 Gartner® Magic Quadrant™ for SASE Platforms report. We view this evaluation as a significant recognition of our strategy to help connect and secure workspace security and coffee shop networking, through our unique connectivity cloud approach.
AC
Abe, Corey Mahan·July 15, 2025Security 
Explore how you can set Copilot coding agent up for success with custom instruction and Copilot setup steps.
CR
Chris Reddington·July 15, 2025AI & ML 
The many ways to juggle line length when working with text... including two proposed properties that could make it easier in the future.

When it comes to merging code, developers will always make the final decision. But we’re rethinking how tools like GitHub Copilot can help.

Designing a new AI feature? Where do you even begin? Here’s a simple, practical overview with useful design patterns for better AI experiences.
VF
Vitaly Friedman·July 14, 2025AI & ML 
Layout. It's one of those easy-to-learn, difficult-to-master things, like they say about playing bass. Not because it's innately difficult to, say, place two

Brands like Nuuly, Ruggable, and GitHub are designing multidimensional experiences that build customer trust, serve employee needs, and uphold core values.

This blog post is the first of a series, in which we share our journey in redesigning Quicksilver — Cloudflare’s distributed key-value store that serves over 3 billion keys per second globally. Here we discuss how we migrated from full datasets on each machine to a more scalable distributed design.
AD
Anton Dort Golts, Marten Van De Sanden·July 10, 2025Distributed 
This post is an introduction for CNPG(Cloud Native PG) and describes how to create a single instance cluster.

Discover how to increase the coverage of your CodeQL CORS security by modeling developer headers and frameworks.

The Wizard of Oz method is a proven UX research tool that simulates real interactions to uncover authentic user behavior. Victor Yocco unpacks the core principles of the WOZ method, explores advanced real-world applications, and highlights its unique value, including its relevance in the emerging field of agentic AI.

Ensuring quality code suggestions from Copilot goes beyond the perfect prompt. Context is key to success when working with your AI pair programmer.
CH
Christopher Harrison·July 9, 2025AI & ML 
Cloudflare chose TimescaleDB to power its Digital Experience Monitoring and Zero Trust Analytics products. TimescaleDB is a PostgreSQL extension designed for real-time analytics and time series data, and it helped us reduce query latency by 5–35x and cut storage footprint by 33x.

This blog describes the experience related to Swiss PGday 2025. Dive in and checkout some captivating moments from the event.

Today, the Git project released new versions to address seven security vulnerabilities that affect all prior versions of Git.

Traditional page builders have shaped how we build WordPress sites for years. Let’s take a closer look at [Droip](https://droip.com/), a modern, no-code visual builder, and explore how it redefines the experience with cleaner performance, full design freedom, and zero plugin dependency.

Cloudflare's SASE platform now offers egress policies by hostname, domain, content category, and application in open beta. This makes it easy to author simple and secure policies that control the source IP addresses that an organization's Internet traffic uses to connect to external services.


As always in design, timing matters, and so do timely notifications. Let’s explore how we might improve the notifications UX. More design patterns in our Smart Interface Design Patterns, a friendly video course on UX and design patterns by Vitaly — from complex data tables and nested filters to FAQs and error messages.

Discover how Shopify uses machine learning, data, and advanced tools to help merchants succeed in the ever-changing game of commerce.
SEShopify Engineering·July 4, 2025AI & ML 
Figma’s Brand Studio designed an immersive conference that celebrated the spirit of makership at every turn.

DjVuLibre has a vulnerability that could enable an attacker to gain code execution on a Linux Desktop system when the user tries to open a crafted document.
KB
Kevin Backhouse, Antonio Morales·July 3, 2025Security