Introducing HAR Sanitizer: secure HAR sharing
As a follow-up to the most recent Okta breach, we are making a HAR file sanitizer available to everyone, not just Cloudflare customers, at no cost.
Q3 2023 Internet disruption summary
In this post, we review selected Internet disruptions observed by Cloudflare during the third quarter of 2023, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause or common geography
Cache Reserve goes GA: enhanced control to minimize egress costs
We're excited to announce the graduation of Cache Reserve from beta to GA, accompanied by the introduction of several exciting new features. These new features include adding Cache Reserve into the analytics shown on the Cache overview section of the Cloudflare dashboard
Cyber attacks in the Israel-Hamas war
Since the October 7 Hamas attack, DDoS attackers have been targeting Israeli newspaper and media websites as well as software companies and financial institutions.
How Cloudflare mitigated yet another Okta compromise
On Wednesday, October 18, 2023, we discovered attacks on our system that we were able to trace back to Okta. We have verified that no Cloudflare customer information or systems were impacted by this event because of our rapid response.
Empowering our partners with the new Tenant Platform dashboard
We are proud to announce the general availability of our first dashboard for our Tenant Platform, providing an intuitive user interface for agencies and partners to manage their client accounts
Network flow monitoring is GA, providing end-to-end traffic visibility
Network engineers often need better visibility into their network’s traffic when analyzing DDoS attacks or troubleshooting other traffic anomalies. To solve this problem, Cloudflare offers a network flow monitoring product that gives customers end-to-end traffic visibility across their network.
Introducing the Project Argus Datacenter-ready Secure Control Module design specification
The DC-SCM (Datacenter-ready Secure Control Module) decouples server management from the server motherboard. It provides flexibility to implement multiple server management and security solutions with the same server motherboard design
Malicious “RedAlert - Rocket Alerts” application targets Israeli phone calls, SMS, and user information
On October 13, 2023, Cloudflare’s Cloudforce One Threat Operations Team became aware of a malicious Google Android application impersonating the real-time rocket alert app, Red Alert, which provides real-time rocket alerts for Israeli citizens
How Prisma saved 98% on distribution costs with Cloudflare R2
Cloudflare products provide much of the underlying infrastructure for Prisma Accelerate and Prisma Pulse, empowering user-focused product development. This ongoing collaboration extends to enhancing the Prisma ORM
HTTP/2 Rapid Reset: deconstructing the record-breaking attack
This post dives into the details of the HTTP/2 protocol, the feature that attackers exploited to generate the massive Rapid Reset attacks
HTTP/2 Zero-Day vulnerability results in record-breaking DDoS attacks
The “HTTP/2 Rapid Reset” attack exploits a weakness in the HTTP/2 protocol to generate enormous, hyper-volumetric DDoS attacks. Cloudflare has mitigated a barrage of these attacks in recent months, including an attack three times larger than any previous attack we’ve observed
Internet traffic patterns in Israel and Palestine following the October 2023 attacks
On Saturday, October 7, 2023, attacks from the Palestinian group Hamas launched from the Gaza Strip against the south of Israel started a new conflict in the region. Cloudflare's data shows that Internet traffic was impacted in different ways
Uncovering the Hidden WebP vulnerability: a tale of a CVE with much bigger implications than it originally seemed
Google announced a security issue in Chrome titled "Heap buffer overflow in WebP in Google Chrome." At first it seemed like just another bug, but has implications that extended well beyond Chrome.
Cloudflare's a Top 100 Most Loved Workplace for the second consecutive year in 2023
We are proud to share that Cloudflare has been certified and recognized as one of the Top 100 Most Loved Workplaces in 2023 by Newsweek and the Best Practice Institute (BPI) for the second consecutive year.
1.1.1.1 lookup failures on October 4, 2023
On 4 October 2023, Cloudflare experienced DNS resolution problems. Some users may have received SERVFAIL DNS responses to valid queries. In this blog, we’re going to talk about what the failure was, why it occurred, and what we’re doing to make sure this doesn’t happen again
All Cloudflare customers protected from the Atlassian Confluence CVE-2023-22515
On 2023-10-04 at 13:00 UTC, Atlassian released details of the zero-day vulnerability described as “Privilege Escalation Vulnerability in Confluence Data Center and Server” (CVE-2023-22515), a zero-day vulnerability impacting Confluence Server and Data Center products
Waiting Room adds multi-host and path coverage, unlocking broader protection and multilingual setups
Today, we are thrilled to announce that Waiting Room now supports coverage of multiple hostname and path combinations with a single waiting room, giving customers more flexibility and offering broader site coverage without interruptions to end-user flows
Announcing General Availability for the Magic WAN Connector: the easiest way to jumpstart SASE transformation for your network
We’re announcing the general availability of the Magic WAN Connector, which serves as the glue between your existing network hardware and Cloudflare’s networ
Birthday Week recap: everything we announced — plus an AI-powered opportunity for startups
Need a recap or refresher on all the big Birthday Week news this week? This recap has you covered
See what threats are lurking in your Office 365 with Cloudflare Email Retro Scan
We are now announcing the ability for Cloudflare customers to scan old messages within their Office 365 Inboxes for threats. This Retro Scan will let you look back seven days and see what threats your current email security tool has missed
Encrypted Client Hello - the last puzzle piece to privacy
We're excited to announce a contribution to improving privacy for everyone on the Internet. Encrypted Client Hello, a new standard that prevents networks from snooping on which websites a user is visiting, is now available on all Cloudflare plans.
Cloudflare is free of CAPTCHAs; Turnstile is free for everyone
Now that we’ve eliminated CAPTCHAs at Cloudflare, we want to hasten the demise of CAPTCHAs across the internet. We’re thrilled to announce that Turnstile is generally available, and Turnstile’s ‘Managed’ mode is now completely free to everyone for unlimited use.
Cloudflare now uses post-quantum cryptography to talk to your origin server
Starting today, you can secure the connection between Cloudflare and your origin server with post-quantum cryptography
Network performance update: Birthday Week 2023
In this post we are going to share the most recent updates since our last post in June, and tell you about our tools and processes that we use to monitor and improve our network performance
Detecting zero-days before zero-day
In this blog post we talk about our approach and ongoing research into detecting novel web attack vectors in our WAF before they are seen by a security researcher.
Easily manage AI crawlers with our new bot categories
Manage AI crawlers, out of the box with Cloudflare
Cloudflare is now powering Microsoft Edge Secure Network
This integration will allow Microsoft Edge users who opt in to browse the Internet more privately, without being tracked across websites
Hyperdrive: making databases feel like they’re global
Hyperdrive makes accessing your existing databases from Cloudflare Workers, wherever they are running, hyper fast
D1: open beta is here
D1 is now in open beta, and the theme is “scale”: with higher per-database storage limits and the ability to create more databases, we’re unlocking the ability for developers to build production-scale applications on D1
Race ahead with Cloudflare Pages build caching
Unleash the fast & furious in your builds with Cloudflare Pages' build caching. Reduce build times by caching previously computed project components. Now in Beta for select frameworks and package managers.
Re-introducing the Cloudflare Workers Playground
Today, we’re excited to announce an updated Cloudflare Workers playground, where users can develop and test Workers before sharing or deploying them
Running Serverless Puppeteer with Workers and Durable Objects
We’ve heard from developers that configuring and maintaining their own serverless browser automation systems can be quite painful. The Workers Browser Rendering API solves this
A Socket API that works across JavaScript runtimes — announcing a WinterCG spec and Node.js implementation of connect()
Engineers from Cloudflare and Vercel have published a specification of the connect() sockets API for review by the community, along with a Node.js compatible implementation of connect() that developers can start using today
Cloudflare Integrations Marketplace introduces three new partners: Sentry, Momento and Turso
We introduced integrations with Supabase, PlanetScale, Neon and Upstash. Today, we are thrilled to introduce our newest additions to Cloudflare’s Integrations Marketplace – Sentry, Turso and Momento
New Workers pricing — never pay to wait on I/O again
Announcing new pricing for Cloudflare Workers, where you are billed based on CPU time, and never for the idle time that your Worker spends waiting on network requests and other I/O.
Cloudflare’s 2023 Annual Founders’ Letter
Cloudflare is officially a teenager. We launched on September 27, 2010. Today we celebrate our thirteenth birthday
The best place on Region: Earth for inference
Today, we’re excited to make a series of announcements that we believe will make a similar impact as Workers did in the future of computing
Workers AI: serverless GPU-powered inference on Cloudflare’s global network
We are excited to launch Workers AI - an AI inference as a service platform, empowering developers to run AI models with just a few lines of code, all powered by our global network of GPUs
Announcing AI Gateway: making AI applications more observable, reliable, and scalable
AI Gateway helps developers have greater control and visibility in their AI apps, so that you can focus on building without worrying about observability, reliability, and scaling. AI Gateway handles the things that nearly all AI applications need
Partnering with Hugging Face to make deploying AI easier and more affordable than ever 🤗
Today, we’re excited to announce that we are partnering with Hugging Face to make AI models more accessible and affordable than ever before to developers
Vectorize: a vector database for shipping AI-powered applications to production, fast
Vectorize is our brand-new vector database offering, designed to let you build full-stack, AI-powered applications entirely on Cloudflare’s global network: and you can start building with it right away
You can now use WebGPU in Cloudflare Workers
Today, we are introducing WebGPU support to Cloudflare Workers. This blog will explain why it's important, why we did it, how you can use it, and what comes next
Writing poems using LLama 2 on Workers AI
Matthew and Michelle, co-founders of Cloudflare, published their annual founders’ letter today. The letter ends with a poem written by an AI running using Workers AI on Cloudflare’s global network.
What AI companies are building with Cloudflare
Cloudflare enables various AI applications. We asked AI companies using Cloudflare how they leverage our platform for their innovative projects.
Welcome to connectivity cloud: the modern way to connect and protect your clouds, networks, applications and users
Surveys of IT and security leaders indicate that 72% would highly value a secure “any-to-any” cloud platform. And they said they would invest an average of 16% of their entire IT and security budget in such a platform
Amazon’s $2bn IPv4 tax — and how you can avoid paying it
In this blog, we’ll explain a little bit more about the technology involved, but most importantly, give you a step-by-step walkthrough of how Cloudflare can help you eliminate the need to pay Amazon for something that they shouldn’t be charging you for in the first place
Sippy helps you avoid egress fees while incrementally migrating data from S3 to R2
Use Sippy to incrementally migrate data from S3 to R2 as it’s requested and avoid migration-specific egress fees
Traffic anomalies and notifications with Cloudflare Radar
Cloudflare Radar now displays country and ASN traffic anomalies in the Outage Center as they are detected, as well as publishing anomaly information via API. We are also launching Radar notifications, enabling users to subscribe to notifications about traffic anomalies
Gone offline: how Cloudflare Radar detects Internet outages
Cloudflare Radar will be publishing anomalous traffic events for countries and Autonomous Systems (ASes). These events are the same ones referenced above that have been triggering our internal workflow to validate and confirm disruptions
Image optimization made simpler and more predictable: we’re merging Cloudflare Images and Image Resizing
We’re changing how we bill for Image Resizing to let you calculate your monthly costs more accurately and reliably. All Image Resizing features will be available under Cloudflare Images
How Cloudflare’s systems dynamically route traffic across the globe
Meet the smartest member of the Cloudflare network team that helps keep you online no matter what happens to the Internet underneath us
Switching to Cloudflare can cut your network carbon emissions up to 96% (and we're joining the SBTi)
We’re excited to share an independent report this week that found that switching enterprise network services from on premises devices to Cloudflare services can cut carbon emissions up to 96%
Announcing Cloudflare Incident Alerts
Customers may now subscribe to Cloudflare Incident Alerts and choose when to get notified based on affected products and level of impact
Cloudflare Fonts: enhancing website font privacy and speed
Introducing Cloudflare Fonts. Enhance privacy and performance for websites using Google Fonts by loading fonts from their own origin. Improve user privacy, enhance site performance, and simplify the process. No need for code changes. Simply enable Cloudflare Fonts in your dashboard
Cloudflare account permissions, how to use them, and best practices
Cloudflare has a lot of new roles, how should we use them, and how can we stay safe
Cloudflare Stream Low-Latency HLS support now in Open Beta
Cloudflare Stream’s LL-HLS support enters open beta today. You can deliver video to your audience faster, reducing the latency a viewer may experience on their player to as little as 3 seconds
Traffic transparency: unleashing the power of Cloudflare Trace
Today, we are excited to announce Cloudflare Trace! Cloudflare Trace is available to all our customers. Cloudflare Trace enables you to understand how HTTP requests traverse your zone's configuration and what Cloudflare Rules are being applied to the request
Welcome to Birthday Week 2023
Building the future is, in part, what Birthday Week is about. Over the past 13 years we’ve announced things like Universal SSL (doubling the size of the encrypted web overnight), or Cloudflare Workers (helping change the way people build and scale applications). This year will be no different
Typo traps: analyzing traffic to exmaple.com (or is it example.com?)
Cloudflare has owned exmaple.com for a few years now, but don’t confuse it with example.com! example.com is a reserved domain name set by the IANA, under the direction of the IETF.