Making home Internet faster has little to do with “speed”
The speed of an Internet connection is more about decreasing real-world latency than adding underutilized bandwidth
Measuring network quality to better understand the end-user experience
Starting today, you don’t have to be a network engineer to figure out what your Internet is good for. Let’s tell you how we’re doing it.
Cloudflare One named in Gartner® Magic Quadrant™ for Security Service Edge
Cloudflare Zero Trust named to Gartner® Magic Quadrant™ for Security Service Edge
Internet disruptions overview for Q1 2023
In this post, we review selected Internet disruptions observed by Cloudflare during the first quarter of 2023, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause or common geography
Introducing Cloudflare’s new Network Analytics dashboard
Learn how the new and improved Network Analytics dashboard provides security professionals insights into their DDoS attack and traffic landscape
DDoS threat report for 2023 Q1
Threat actors kicked off 2023 with a bang. The start of the year was characterized by a series of hacktivist campaigns against Western targets, and record-breaking hyper volumetric attacks
Protect your domain with Zone Holds
Protect against accidental additions of your domain, subdomain, or custom hostnames in other accounts with Zone Holds. Available by default for all enterprise customers
Cloudflare’s view of the Virgin Media outage in the UK
UK ISP Virgin Media (AS5089) experienced several outages on April 4, 2023. We examine the impact to Internet traffic, availability of Virgin Media web properties, and how BGP activity may provide insights into the underlying cause
Oxy: the journey of graceful restarts
Deploying new versions of long-lived server software while maintaining a reliable experience is challenging. For oxy, we established several development and operational patterns to increase reliability and reduce friction in deployments
mTLS client certificate revocation vulnerability with TLS Session Resumption
This blog post outlines the root cause analysis and solution for a bug found in Cloudflare’s mTLS implementation
Introducing Rollbacks for Workers Deployments
Deployment rollbacks provide users the ability to quickly visualize and deploy past versions of their Workers, providing even more confidence in the deployment pipeline
Upgrading one of the oldest components in Cloudflare’s software stack
Engineers at Cloudflare have improved the release procedure of our largest edge proxy server. The improved process allows us to significantly decrease the amount of memory used during the version upgrade. As a result, we can deploy code faster and more reliably
Helping protect personal information in the cloud, all across the world
Helping protect personal information in the cloud, all across the world
From IP packets to HTTP: the many faces of our Oxy framework
We have recently introduced Oxy, our Rust-based framework for proxies powering many Cloudflare services and products. Today, we will explain why and how it spans various layers of the OSI model, by handling directly raw IP packets, TCP connections and UDP payloads
Killnet and AnonymousSudan DDoS attack Australian university websites, and threaten more attacks — here’s what to do about it
Over the past 24 hours, Cloudflare has observed HTTP DDoS attacks targeting university websites in Australia. Universities were the first of several groups publicly targeted by the pro-Russian hacker group Killnet and their affiliate AnonymousSudan, as revealed in a recent Telegram post
Cloudflare’s commitment to the 2023 Summit for Democracy
Cloudflare is proud to participate in and contribute commitments to the 2023 Summit Summit for Democracy because we believe that everyone should have access to an Internet that is faster,
Introducing our first Authorized Service Delivery Partners for Cloudflare One
Since launch, Authorized Services Delivery Partner track is having a notable impact and now we are thrilled to announce the first partners who have achieved the designation
Use the language of your choice with Pages Functions via WebAssembly
Today Pages is excited to offer support for WebAssembly when writing a Pages Function
Node.js compatibility for Cloudflare Workers – starting with Async Context Tracking, EventEmitter, Buffer, assert, and util
Over the coming months, Cloudflare Workers will start to roll out built-in compatibility with Node.js core APIs as part of an effort to support increased compatibility across JavaScript runtimes
Out now! Auto-renew TLS certificates with DCV Delegation
Cloudflare will now allow customers that are managing DNS externally to auto-renew certificates through DCV Delegation
Everything you might have missed during Security Week 2023
Learn how Cloudflare made it easier to shift from protecting applications, to protecting employees, and making sure they are protected everywhere during Security Week 2023
The quantum state of a TCP port
If I navigate to https://blog.cloudflare.com/, my browser will connect to a remote TCP address from the local IP address assigned to my machine, and a randomly chosen local TCP port. What happens if I then decide to head to another site?
One-click ISO 27001 certified deployment of Regional Services in the EU
Cloudflare announces one-click ISO certified region, a super easy way for customers to limit where traffic is serviced to ISO 27001 certified data centers inside the European Union
Account Security Analytics and Events: better visibility over all domains
Revealing Account Security Analytics and Events, new eyes on your account in Cloudflare dashboard to give holistic visibility. No matter how many zones you manage, they are all there!
Wildcard and multi-domain support in Cloudflare Access
We are thrilled to announce the full support of wildcard and multi-hostname application definitions in Cloudflare Access
How we built DMARC Management using Cloudflare Workers
At Cloudflare, we use the Workers platform and our product stack to build new services. Read how we made the new DMARC Management solution entirely on top of our APIs.
Cloudflare Access is the fastest Zero Trust proxy
Cloudflare Access is 75% faster than Netskope and 50% faster than Zscaler, and our network is faster than other providers in 48% of last mile networks
Stop brand impersonation with Cloudflare DMARC Management
Brand impersonation continues to be a big problem globally. Setting SPF, DKIM and DMARC policies is a great way to reduce that risk, and protect your domains from being used in spoofing emails. But maintaining a correct SPF configuration can be very costly and time consuming
Introducing custom pages for Cloudflare Access
As more users start their day with Cloudflare Access, we’re excited to announce new options to customize how those users experience our industry-leading Zero Trust solution. We’re excited to announce customizable Cloudflare Access pages including login, blocks and the application launcher
Cloudflare partners with KnowBe4 to equip organizations with real-time security coaching to avoid phishing attacks
Cloudflare’s Area 1 Solution works with Knowbe4 to provide customers with security and awareness training
Post-quantum crypto should be free, so we’re including it for free, forever
Cloudflare makes the most advanced cryptography free for everyone, and it’s in beta today
IBM Cloud works with Cloudflare to help clients modernize and deliver secured cloud infrastructure
IBM and Cloudflare continue to partner together to help customers meet the unique security, performance, resiliency and compliance needs of their customers through the addition of exciting new product and service offerings.
No, AI did not break post-quantum cryptography
The recent news reports of AI cracking post-quantum cryptography are greatly exaggerated. In this blog, we take a deep dive into the world of side-channel attacks and how AI has been used for more than a decade already to aid it
Protect your key server with Keyless SSL and Cloudflare Tunnel integration
Now, customers will be able to use our Cloudflare Tunnels product to send traffic to the key server through a secure channel, without publicly exposing it to the rest of the Internet
Super Bot Fight Mode is now configurable!
Super Bot Fight Mode can be used with Skip rules now to allow for configurable deployments
Automatically discovering API endpoints and generating schemas using machine learning
Today we’re announcing that Cloudflare can now automatically discover all API endpoints and learn API schemas for all of our API Gateway customers
Detecting API abuse automatically using sequence analysis
Today, we're announcing Cloudflare Sequence Analytics for APIs. Using Sequence Analytics, Customers subscribed to API Gateway can view the most important sequences of API requests to their endpoints
Announcing Cloudflare Fraud Detection
Cloudflare Fraud Detection uses machine learning models to better protect businesses from fake account signups, account takeover attacks, and carding attacks to ensure businesses can operate online safely
Cloudflare’s Channel Partner Award winners of 2022
Cloudflare announces our Partner Award winners, in recognition of their outstanding achievements during the course of 2022, delivering the technical expertise, solutions, and services needed to solve customers’ challenges and to help build a better Internet
Using the power of Cloudflare’s global network to detect malicious domains using machine learning
Cloudflare has developed proprietary models leveraging machine learning and other advanced analytical techniques to detect security threats that take advantage of the domain name system (DNS)
Announcing WAF Attack Score Lite and Security Analytics for business customers
We are making the machine learning empowered WAF and Security analytics view available to our Business plan customers, to help detect and stop attacks before they are known
Analyze any URL safely using the Cloudflare Radar URL Scanner
Try our URL Scanner. Cloudflare Radar’s newest free tool for an under-the-hood look at any webpage
The state of application security in 2023
One year ago we published our first Application Security Report. For Security Week 2023, we are providing updated insights and trends around mitigated traffic, bot and API traffic, and account takeover attacks.
No hassle migration from Zscaler to Cloudflare One with The Descaler Program
Cloudflare is excited to launch the Descaler Program, a frictionless path to migrate existing Zscaler customers to Cloudflare One. Cloudflare is making it even easier for enterprise customers to make the switch to a faster, simpler, and more agile foundation for security and network transformation
Cloudflare One DLP integrates with Microsoft Information Protection labels
Today, we are excited to announce that Cloudflare One now offers Data Loss Prevention (DLP) detections for Microsoft Purview Information Protection labels. Simply integrate with your Microsoft account, retrieve your labels, and build rules to guide the movement of your labeled data
Adding Zero Trust signals to Sumo Logic for better security insights
The Cloudflare App for Sumo Logic now supports Zero Trust logs for out of the box, ready-made security dashboards
How sophisticated scammers and phishers are preying on customers of Silicon Valley Bank
In order to breach trust and trick unsuspecting victims, threat actors overwhelmingly use topical events as lures. The news about what happened at Silicon Valley Bank is the latest event to watch out for and stay vigilant against opportunistic phishing campaigns using SVB as the lure
Scan and secure Atlassian with Cloudflare CASB
Cloudflare CASB can now integrate and scan Atlassian products, Confluence and Jira, for critical security issues, like misconfigurations, data exposure, and third-party app risks. Start scanning in just a few clicks!
Zero Trust security with Ping Identity and Cloudflare Access
Cloudflare Access and Ping Identity offer a powerful solution for organizations looking to implement Zero Trust security controls to protect their applications and data.
Locking down your JavaScript: positive blocking with Page Shield policies
Starting today, using Page Shield, Cloudflare’s client side security solution, you can ensure only vetted and secure JavaScript is being executed by your user’s browsers. Stop unwanted JavaScript and keep your end user data safe with Page Shield policies.
Top 50 most impersonated brands in phishing attacks and new tools you can use to protect your employees from them
We’re expanding the phishing protections available to Cloudflare One customers by automatically identifying—and blocking—so-called “confusable” domains.
How to stay safe from phishing
Phishing attacks come in all sorts of ways to fool people. Email is definitely the most common, but there are others. Here are some tips to help you catch these scams before you fall for them.
Using Cloudflare Access with CNI
We are thrilled to introduce an innovative new approach to secure hosted applications via Cloudflare Access without the need for any installed software or custom code on your application server.
Mutual TLS now available for Workers
Mutual TLS is used to secure a range of network services and applications: APIs, web applications, microservices, databases and IoT devices. With mTLS support for Workers you can use Workers to authenticate to any service secured by mTLS directly!
Cloudflare Aegis: dedicated IPs for Zero Trust migration
Lock down your services with Cloudflare Aegis: dedicated IPs for Cloudflare egress back to your applications.
Welcome to Security Week 2023
Welcome to Security Week 2023. This week we’ll demonstrate how Cloudflare is making it as easy as possible to shift from protecting applications, to protecting employees, and making sure they are protected everywhere.
Deploying firmware at Cloudflare-scale: updating thousands of servers in more than 285 cities
We have a huge number of servers of varying kinds, from varying vendors, spread over 285 cities worldwide. We need to be able to rapidly deploy various types of firmware updates to all of them, reliably, and automatically, without any kind of manual intervention.
Cloudflare's network expansion in Indonesia
Building a world class network isn’t always easy, otherwise everyone would do it. I wanted to share with you some of the challenges that we’ve faced and how we’ve gone about overcoming them to become a leader for network performance in Indonesia.
Embrace equity on International Women’s Day (and every day)
Happy International Women’s Day! The global theme for 2023 is #EmbraceEquity, which is part of an ongoing effort to raise awareness around “Why equal opportunities are no longer enough.” Today is a time to highlight achievements made by women, but also an opportunity to become better informed.
Accelerate building resiliency into systems with Cloudflare Workers
In this blog post we’ll discuss how Cloudflare Workers enabled us to quickly improve the resiliency of a legacy system
