New Zero Trust navigation coming soon (and we need your feedback)
The Zero Trust dashboard navigation will be getting a visual refresh on March 20, 2023.
Keeping the Cloudflare API 'all green' using Python-based testing
Scout is an automated system providing constant end to end testing and monitoring of live APIs over different environments and resources. Scout does it by periodically running self explanatory Python tests
The White House’s National Cybersecurity Strategy asks the private sector to step up to fight cyber attacks. Cloudflare is ready
The White House released the National Cybersecurity Strategy aimed at securing the Internet. Cloudflare welcomes the Strategy, and congratulates the White House on this much-needed policy initiative.
How Cloudflare runs Prometheus at scale
Here at Cloudflare we run over 900 instances of Prometheus with a total of around 4.9 billion time series. Operating such a large Prometheus deployment doesn’t come without challenges . In this blog post we’ll cover some of the issues we hit and how we solved them
Oxy is Cloudflare's Rust-based next generation proxy framework
In this blog post, we are proud to introduce Oxy - our modern proxy framework, developed using the Rust programming language
How we built an open-source SEO tool using Workers, D1, and Queues
In this blog post, I’m excited to show off some of the new tools in Cloudflare’s developer arsenal, D1 and Queues, to prototype and ship an internal tool for our SEO experts at Cloudflare.
How Rust and Wasm power Cloudflare's 1.1.1.1
Introducing a new DNS platform that powers 1.1.1.1 and various other products.
ROFL with a LOL: rewriting an NGINX module in Rust
Cloudflare engineers rewrote cf-html, an old NGINX module, in Rust. This project revealed much about NGINX, potentially leading to its full replacement in Cloudflare's infrastructure.
One year of war in Ukraine: Internet trends, attacks, and resilience
This blog post reports on Internet insights during an historical war in Europe that has been seen and shared online, and discusses how Ukraine's Internet remained resilient in spite of dozens of disruptions in three different stages of the conflict.
The Chief Zero Trust Officer: a new role for a new era of cybersecurity
Implementing Zero Trust can be challenging, and efforts may stall. The need for a Chief Zero Trust Officer (CZTO) is driven by the increasing importance of Zero Trust security in the face of escalating cyber attacks.
So long, and thanks for all the deployments: deprecating Wrangler v1
Version 1 of Wrangler has served us well for years. But with a new major version to focus on, it’s time to say goodbye
Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack
This was a weekend of record-breaking DDoS attacks. Over the weekend, Cloudflare detected and mitigated dozens of hyper-volumetric DDoS attacks. The majority of attacks peaked in the ballpark of 50-70 million requests per second (rps) with the largest exceeding 71 million rps
A look at Internet traffic trends during Super Bowl LVII
We look at who the biggest winners were among Super Bowl advertisers, and examine traffic trends for food delivery services, social media, and sports and betting sites. We also review city and state-level traffic trends, as well as related email threat volume in the weeks ahead of the game
Welcome to Wildebeest: the Fediverse on Cloudflare
Today we're announcing Wildebeest, an open-source, easy-to-deploy ActivityPub and Mastodon-compatible server built entirely on top of Cloudflare's Supercloud.
How Cloudflare erroneously throttled a customer’s web traffic
Today’s post is a little different. It’s about a single customer’s website not working correctly because of incorrect action taken by Cloudflare.
Manage and control the use of dedicated egress IPs with Cloudflare Zero Trust
Administrators can now use Gateway traffic egress policies to determine which egress IPs are used when.
Get notified about the most relevant events with Advanced HTTP Alerts
Today we’re adding more flexibility to HTTP alerting, enabling customers to customize the types of activity they’re alerted on and how those alerts are organized.
Uptick in healthcare organizations experiencing targeted DDoS attacks
Over the past few days, Cloudflare, as well as other sources, have observed healthcare organizations targeted by a pro-Russian hacktivist group claiming to be Killnet.
Cloudflare's handling of a bug in interpreting IPv4-mapped IPv6 addresses
Recently, a vulnerability was reported to our bug bounty about a bug in the way some of our code interprets IPv4 addresses mapped into IPv6 addresses.
CVE-2022-47929: traffic control noqueue no problem?
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands.
Towards a global framework for cross-border data flows and privacy protection
In our third and final blog post leading up to Data Privacy Day, we drill down into the challenges for cross-border data flows, in particular personal data transfers from the EU to the US.
Inside Geo Key Manager v2: re-imagining access control for distributed systems
Using the story of Geo Key Manager v2 as an example, let’s re-imagine access control for distributed systems using a variant of public-key cryptography, called attribute-based encryption.
Cyberattacks on Holocaust educational websites increased in 2022
Today, 78 years after the liberation of the Auschwitz death camp, we mark the International Holocaust Remembrance Day. With Cloudflare’s Project Galileo, we protect Holocaust educational websites and at risk public interest groups. Read more to see how attacks on these groups increased in 2022.
Navigating the changing data localization landscape with Cloudflare’s Data Localization Suite
We continue to expand and improve our data localization suite to help support our customers who have to comply with data localization requirements
Cloudflare incident on January 24, 2023
Several Cloudflare services became unavailable for 121 minutes on January 24th, 2023 due to an error releasing code that manages service tokens. The incident degraded a wide range of Cloudflare products
Armed to Boot: an enhancement to Arm's Secure Boot chain
Enhancing the Arm Secure Boot chain to improve platform security on modern systems.
Intelligent, automatic restarts for unhealthy Kafka consumers
At Cloudflare, we take steps to ensure we are resilient against failure at all levels of our infrastructure. This includes Kafka, which we use for critical workflows such as sending time-sensitive emails and alerts.
Internet disruptions overview for Q4 2022
In this post, we review selected Internet disruptions observed by Cloudflare during the fourth quarter of 2022, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause or common geography.
Introducing Waiting Room Bypass Rules
Waiting Room now offers customers more fine-tuned control over what traffic a waiting room covers. Queue only the traffic you want to with Bypass Waiting Room Rules, now available to all Enterprise customers with an Advanced Purchase of Waiting Room.
Three new winners of Project Jengo, and more defeats for the patent troll
Announcing three new winners of Project Jengo, and a major case update in our ongoing fight against the patent troll Sable Networks.
CIO Week 2023 recap
Learn about all the new products, partnerships, and innovations Cloudflare announced during CIO Week to help organizations modernize their IT and security.
Cloudflare Zero Trust for managed service providers
Adding new features to Cloudflare Zero Trust for Managed Service Providers using Gateway DNS.
Give us a ping. (Cloudflare) One ping only.
Now Zero Trust administrators can use the familiar debugging tools that we all know and love like ping, traceroute, and MTR to test connectivity to private network destinations running behind their Tunnels
China Express: Cloudflare partners to boost performance in China for corporate networks
China Express is a suite of connectivity and performance offerings designed to improve application performance for users in China.
Cloudflare Application Services for private networks: do more with the tools you already love
Today, we’re excited to announce new integrations that make it possible to unlock operational and cost efficiencies for IT teams by allowing them to do more with fewer tools, and enable new use cases that are impossible without Cloudflare’s “every service everywhere” architecture.
Announcing SCIM support for Cloudflare Access & Gateway
Cloudflare Access & Gateway now support the System for Cross-domain Identity Management (SCIM) protocol.
Zone Versioning is now generally available
Safely configure and deploy updates to zone configuration with Zone Versioning now Generally Available for Enterprise customers
Expanding our Microsoft collaboration: proactive and automated Zero Trust security for customers
As CIOs navigate the complexities of stitching together multiple solutions, we are extending our collaboration with Microsoft to create one of the best Zero Trust solutions available.
Cloudflare's CASB integration with Salesforce and Box
Cloudflare CASB adds two new SaaS integrations for Salesforce and Box.
How Cloudflare CASB and DLP work together to protect your data
Cloudflare CASB and DLP will work together to protect sensitive data at rest.
How Cloudflare Area 1 and DLP work together to protect data in email
Customers can leverage the power of Email Security and Cloudflare One to prevent data loss in their corporate network.
Improved access controls: API access can now be selectively disabled
Making it easier for account owners to view and manage the access their users have on an account by allowing them to restrict API access to the account.
One-click data security for your internal and SaaS applications
Protect sensitive data on any Access app for any user on any device.
Why do CIOs choose Cloudflare One?
Over 10,000 organizations trust Cloudflare One to connect and secure users, devices, applications, and data. Hear from the leaders of our customers to better understand why they selected Cloudflare.
Cloudflare DDoS threat report for 2022 Q4
In Q4, Cloudflare mitigated millions of DDoS attacks. Attack durations increase, volumetric attacks surged, and ransom DDoS attacks persist. Travel & events industries were hit hardest and over 90% of traffic to Chinese Internet properties were L3/4 DDoS attacks. Read more on our recent report.
Announcing the Authorized Partner Service Delivery Track for Cloudflare One
This week we’re announcing the Authorized Services Delivery Partner (ASDP) Track designed to validate partners that want to deliver services around Cloudflare One
Announcing Custom DLP profiles
Cloudflare Data Loss Prevention now offers the ability to create custom detections.
Preview any Cloudflare product today
Enterprise customers can now start previewing non-contracted services
Network detection and settings profiles for the Cloudflare One agent
Cloudflare WARP can now securely detect pre-configured locations and route traffic based on the needs of the organization for that location.
New ways to troubleshoot Cloudflare Access 'blocked' messages
Investigate, allow or block decisions based on how a connection was made with the same level of ease that you can troubleshoot user identity.
Cloudflare protection for all your cardinal directions
In this post, we’ll recap how definitions of corporate network traffic have shifted and how Cloudflare One provides protection for all traffic flows, regardless of source or destination.
Cloudflare is faster than Zscaler
Cloudflare is 38-55% faster at delivering Zero Trust experiences than Zscaler. Let’s talk about why that is and how we found that out
Weave your own global, private, virtual Zero Trust network on Cloudflare with WARP-to-WARP
Today, we’re excited to announce a new way to use Cloudflare WARP to securely connect to and from any device in your Zero Trust deployment simply running WARP
Bring your own certificates to Cloudflare Gateway
Security and IT administrators can now bring their own custom certificates to encrypt user side connections for Zero Trust
Welcome to CIO Week 2023
This CIO Week we’ll demonstrate how Cloudflare is helping CIOs keep data, devices and employees both safe and fast across hybrid and remote environments. We’ll show how Cloudflare accelerates digital transformation and modernizes networking and security towards a Zero Trust model
How Cloudflare can help stop malware before it reaches your app
Today, we’re making the job of application security teams easier, by providing a content scanning engine integrated with our Web Application Firewall (WAF), so that malicious files being uploaded by end users, never reach origin servers in the first place
The state of HTTP in 2022
So what happened at all of those working group meetings, specification documents, and side events in 2022? What are implementers and deployers of the web’s protocol doing? And what’s coming next?
Cloudflare Radar 2022 Year in Review
We’re excited to present the Cloudflare Radar 2022 Year In Review, featuring interactive charts, graphs, and maps you can use to explore what changed on the Internet throughout this past year
One of our most requested features is here: DNS record comments and tags
Today, we’re releasing DNS record comments and tags, making it easier to keep track of and manage DNS records of your domain
The unintended consequences of blocking IP addresses
A discussion about IP blocking: why we see it, what it is, what it does, who it affects, and why it’s such a problematic way to address content online.
