A raft of free Cloudflare services for AI startups
Bootstrapped AI startups can get the startup plan without accelerator affiliation
Introducing Cursor: the Cloudflare AI Assistant
Check out Cursor - our experimental AI assistant trained to answer questions about Cloudflare’s Developer Platform!
Query Cloudflare Radar and our docs using ChatGPT plugins
We’re excited to share two new Cloudflare ChatGPT plugins – the Cloudflare Radar plugin and the Cloudflare Docs plugin
Welcome to Developer Week 2023
It is an incredibly exciting time to be a developer. We couldn’t imagine a better time to be kicking off Developer Week here at Cloudflare
Batteries included: how AI will transform the who and how of programming
The recent arrival of LLMs capable of assisting programmers in writing, debugging and modifying code is yet another step. It’s a step at both making programmers more productive and helping more people be programmers
Magic in minutes: how to build a ChatGPT plugin with Cloudflare Workers
Announcing our new Quickstart example for building ChatGPT Plugins with Cloudflare Workers
Cloudflare’s view of Internet disruptions in Pakistan
Following the arrest of ex-PM Imran Khan, violent protests led the Pakistani government to order the shutdown of mobile Internet services and blocking of social media platforms. We examine the impact of these shutdowns on Internet traffic in Pakistan and traffic to Cloudflare’s 1.1.1.1 DNS resolver.
How Pingora keeps count
In this blog post, we explain and open source the counting algorithm that powers Pingora. This will be the first of a series of blog posts that share both the Pingora libraries and the ideas behind
The Linux Crypto API for user applications
If you run your software on Linux, the Linux Kernel itself can satisfy all your cryptographic needs! In this post we will explore Linux Crypto API for user applications and try to understand its pros and cons
How the coronation of King Charles III affected Internet traffic
As the coronation ceremony unfolded, on Saturday morning, May 6, 2023, there were clear spikes and dips in traffic, each coinciding with key moments of the ceremony
Introducing Object Lifecycle Management for Cloudflare R2
We’re excited to announce that Object Lifecycle Management for R2 is generally available, allowing you to effectively manage object expiration, all from the R2 dashboard or via our API
The European Network Usage Fees proposal is about much more than a fight between Big Tech and Big European telcos
There’s an important debate happening in Europe that could affect the future of the Internet. The European Commission is considering new rules for how networks connect to each other on the Internet.
Cloudflare is faster than Netskope and Zscaler across LATAM
With 47 data centers across Latin America and Caribbean, Cloudflare has the largest number of SASE Points of Presence across all vendors, meaning we can offer our Zero Trust services closer to the end user and reduce unwanted latency
How we built Network Analytics v2
Network Analytics v2 is a fundamental redesign of the backend systems that power Network Analytics
Effects of the conflict in Sudan on Internet patterns
On Saturday, April 15, 2023, an armed conflict between rival factions of the military government of Sudan began. Cloudflare observed a disruption in Internet traffic on that Saturday, starting at 08:00 UTC, which deepened on Sunday
Celebrating Australia’s Privacy Awareness Week 2023
Cloudflare proudly sponsored Australian Privacy Awareness Week 2023, championing privacy and security technologies to help customers protect sensitive data, forming the "new privacy basics."
SLP: a new DDoS amplification vector in the wild
Researchers have recently published the discovery of a new DDoS reflection/amplification attack vector leveraging the SLP protocol. Cloudflare expects the prevalence of SLP-based DDoS attacks to rise in the coming weeks
Why I joined Cloudflare as Chief Security Officer
As someone who is passionate about technology, security, and its potential to improve our lives, I knew that I wanted to work for a company that shared those values.
Oxy: Fish/Bumblebee/Splicer subsystems to improve reliability
We split a proxy application into multiple services to improve development agility and reliability. This blog also shares some common patterns we are leveraging to design a system supporting zero-downtime restart
Secure by default: recommendations from the CISA’s newest guide, and how Cloudflare follows these principles to keep you secure
In this post we’ll review some of the authors’ recommendations, discuss how Cloudflare applies these principles to the products that we build, and provide some suggestions on what other organizations can do to support similar initiatives internally
How Easter, Passover and Ramadan show up in Internet trends
How Easter (including Orthodox Easter), Passover & Ramadan affected 2023 Internet traffic
DDR4 memory organization and how it affects memory bandwidth
In this blog, we will study the concepts of memory rank and organization, and how memory rank and organization affect the memory bandwidth performance by reviewing some benchmarking test results
Consent management made easy and clear with Cloudflare Zaraz
Cloudflare Zaraz now can also help you with gathering and managing consent. With this new tool, you can easily collect user’s consent preferences on your website, using a consent modal, and apply your consent policy on third-party tools you load via Cloudflare Zaraz
Making home Internet faster has little to do with “speed”
The speed of an Internet connection is more about decreasing real-world latency than adding underutilized bandwidth
Measuring network quality to better understand the end-user experience
Starting today, you don’t have to be a network engineer to figure out what your Internet is good for. Let’s tell you how we’re doing it.
Cloudflare One named in Gartner® Magic Quadrant™ for Security Service Edge
Cloudflare Zero Trust named to Gartner® Magic Quadrant™ for Security Service Edge
Internet disruptions overview for Q1 2023
In this post, we review selected Internet disruptions observed by Cloudflare during the first quarter of 2023, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause or common geography
Introducing Cloudflare’s new Network Analytics dashboard
Learn how the new and improved Network Analytics dashboard provides security professionals insights into their DDoS attack and traffic landscape
DDoS threat report for 2023 Q1
Threat actors kicked off 2023 with a bang. The start of the year was characterized by a series of hacktivist campaigns against Western targets, and record-breaking hyper volumetric attacks
Protect your domain with Zone Holds
Protect against accidental additions of your domain, subdomain, or custom hostnames in other accounts with Zone Holds. Available by default for all enterprise customers
Cloudflare’s view of the Virgin Media outage in the UK
UK ISP Virgin Media (AS5089) experienced several outages on April 4, 2023. We examine the impact to Internet traffic, availability of Virgin Media web properties, and how BGP activity may provide insights into the underlying cause
Oxy: the journey of graceful restarts
Deploying new versions of long-lived server software while maintaining a reliable experience is challenging. For oxy, we established several development and operational patterns to increase reliability and reduce friction in deployments
mTLS client certificate revocation vulnerability with TLS Session Resumption
This blog post outlines the root cause analysis and solution for a bug found in Cloudflare’s mTLS implementation
Introducing Rollbacks for Workers Deployments
Deployment rollbacks provide users the ability to quickly visualize and deploy past versions of their Workers, providing even more confidence in the deployment pipeline
Upgrading one of the oldest components in Cloudflare’s software stack
Engineers at Cloudflare have improved the release procedure of our largest edge proxy server. The improved process allows us to significantly decrease the amount of memory used during the version upgrade. As a result, we can deploy code faster and more reliably
Helping protect personal information in the cloud, all across the world
Helping protect personal information in the cloud, all across the world
From IP packets to HTTP: the many faces of our Oxy framework
We have recently introduced Oxy, our Rust-based framework for proxies powering many Cloudflare services and products. Today, we will explain why and how it spans various layers of the OSI model, by handling directly raw IP packets, TCP connections and UDP payloads
Killnet and AnonymousSudan DDoS attack Australian university websites, and threaten more attacks — here’s what to do about it
Over the past 24 hours, Cloudflare has observed HTTP DDoS attacks targeting university websites in Australia. Universities were the first of several groups publicly targeted by the pro-Russian hacker group Killnet and their affiliate AnonymousSudan, as revealed in a recent Telegram post
Cloudflare’s commitment to the 2023 Summit for Democracy
Cloudflare is proud to participate in and contribute commitments to the 2023 Summit Summit for Democracy because we believe that everyone should have access to an Internet that is faster,
Introducing our first Authorized Service Delivery Partners for Cloudflare One
Since launch, Authorized Services Delivery Partner track is having a notable impact and now we are thrilled to announce the first partners who have achieved the designation
Use the language of your choice with Pages Functions via WebAssembly
Today Pages is excited to offer support for WebAssembly when writing a Pages Function
Node.js compatibility for Cloudflare Workers – starting with Async Context Tracking, EventEmitter, Buffer, assert, and util
Over the coming months, Cloudflare Workers will start to roll out built-in compatibility with Node.js core APIs as part of an effort to support increased compatibility across JavaScript runtimes
Out now! Auto-renew TLS certificates with DCV Delegation
Cloudflare will now allow customers that are managing DNS externally to auto-renew certificates through DCV Delegation
Everything you might have missed during Security Week 2023
Learn how Cloudflare made it easier to shift from protecting applications, to protecting employees, and making sure they are protected everywhere during Security Week 2023
The quantum state of a TCP port
If I navigate to https://blog.cloudflare.com/, my browser will connect to a remote TCP address from the local IP address assigned to my machine, and a randomly chosen local TCP port. What happens if I then decide to head to another site?
One-click ISO 27001 certified deployment of Regional Services in the EU
Cloudflare announces one-click ISO certified region, a super easy way for customers to limit where traffic is serviced to ISO 27001 certified data centers inside the European Union
Account Security Analytics and Events: better visibility over all domains
Revealing Account Security Analytics and Events, new eyes on your account in Cloudflare dashboard to give holistic visibility. No matter how many zones you manage, they are all there!
Wildcard and multi-domain support in Cloudflare Access
We are thrilled to announce the full support of wildcard and multi-hostname application definitions in Cloudflare Access
How we built DMARC Management using Cloudflare Workers
At Cloudflare, we use the Workers platform and our product stack to build new services. Read how we made the new DMARC Management solution entirely on top of our APIs.
Cloudflare Access is the fastest Zero Trust proxy
Cloudflare Access is 75% faster than Netskope and 50% faster than Zscaler, and our network is faster than other providers in 48% of last mile networks
Stop brand impersonation with Cloudflare DMARC Management
Brand impersonation continues to be a big problem globally. Setting SPF, DKIM and DMARC policies is a great way to reduce that risk, and protect your domains from being used in spoofing emails. But maintaining a correct SPF configuration can be very costly and time consuming
Introducing custom pages for Cloudflare Access
As more users start their day with Cloudflare Access, we’re excited to announce new options to customize how those users experience our industry-leading Zero Trust solution. We’re excited to announce customizable Cloudflare Access pages including login, blocks and the application launcher
Cloudflare partners with KnowBe4 to equip organizations with real-time security coaching to avoid phishing attacks
Cloudflare’s Area 1 Solution works with Knowbe4 to provide customers with security and awareness training
Post-quantum crypto should be free, so we’re including it for free, forever
Cloudflare makes the most advanced cryptography free for everyone, and it’s in beta today
IBM Cloud works with Cloudflare to help clients modernize and deliver secured cloud infrastructure
IBM and Cloudflare continue to partner together to help customers meet the unique security, performance, resiliency and compliance needs of their customers through the addition of exciting new product and service offerings.
No, AI did not break post-quantum cryptography
The recent news reports of AI cracking post-quantum cryptography are greatly exaggerated. In this blog, we take a deep dive into the world of side-channel attacks and how AI has been used for more than a decade already to aid it
Protect your key server with Keyless SSL and Cloudflare Tunnel integration
Now, customers will be able to use our Cloudflare Tunnels product to send traffic to the key server through a secure channel, without publicly exposing it to the rest of the Internet
Super Bot Fight Mode is now configurable!
Super Bot Fight Mode can be used with Skip rules now to allow for configurable deployments
Automatically discovering API endpoints and generating schemas using machine learning
Today we’re announcing that Cloudflare can now automatically discover all API endpoints and learn API schemas for all of our API Gateway customers
Detecting API abuse automatically using sequence analysis
Today, we're announcing Cloudflare Sequence Analytics for APIs. Using Sequence Analytics, Customers subscribed to API Gateway can view the most important sequences of API requests to their endpoints