How to stay safe from phishing
Phishing attacks come in all sorts of ways to fool people. Email is definitely the most common, but there are others. Here are some tips to help you catch these scams before you fall for them.
Using Cloudflare Access with CNI
We are thrilled to introduce an innovative new approach to secure hosted applications via Cloudflare Access without the need for any installed software or custom code on your application server.
Mutual TLS now available for Workers
Mutual TLS is used to secure a range of network services and applications: APIs, web applications, microservices, databases and IoT devices. With mTLS support for Workers you can use Workers to authenticate to any service secured by mTLS directly!
Cloudflare Aegis: dedicated IPs for Zero Trust migration
Lock down your services with Cloudflare Aegis: dedicated IPs for Cloudflare egress back to your applications.
Welcome to Security Week 2023
Welcome to Security Week 2023. This week we’ll demonstrate how Cloudflare is making it as easy as possible to shift from protecting applications, to protecting employees, and making sure they are protected everywhere.
Deploying firmware at Cloudflare-scale: updating thousands of servers in more than 285 cities
We have a huge number of servers of varying kinds, from varying vendors, spread over 285 cities worldwide. We need to be able to rapidly deploy various types of firmware updates to all of them, reliably, and automatically, without any kind of manual intervention.
Cloudflare's network expansion in Indonesia
Building a world class network isn’t always easy, otherwise everyone would do it. I wanted to share with you some of the challenges that we’ve faced and how we’ve gone about overcoming them to become a leader for network performance in Indonesia.
Embrace equity on International Women’s Day (and every day)
Happy International Women’s Day! The global theme for 2023 is #EmbraceEquity, which is part of an ongoing effort to raise awareness around “Why equal opportunities are no longer enough.” Today is a time to highlight achievements made by women, but also an opportunity to become better informed.
Accelerate building resiliency into systems with Cloudflare Workers
In this blog post we’ll discuss how Cloudflare Workers enabled us to quickly improve the resiliency of a legacy system
New Zero Trust navigation coming soon (and we need your feedback)
The Zero Trust dashboard navigation will be getting a visual refresh on March 20, 2023.
Keeping the Cloudflare API 'all green' using Python-based testing
Scout is an automated system providing constant end to end testing and monitoring of live APIs over different environments and resources. Scout does it by periodically running self explanatory Python tests
The White House’s National Cybersecurity Strategy asks the private sector to step up to fight cyber attacks. Cloudflare is ready
The White House released the National Cybersecurity Strategy aimed at securing the Internet. Cloudflare welcomes the Strategy, and congratulates the White House on this much-needed policy initiative.
How Cloudflare runs Prometheus at scale
Here at Cloudflare we run over 900 instances of Prometheus with a total of around 4.9 billion time series. Operating such a large Prometheus deployment doesn’t come without challenges . In this blog post we’ll cover some of the issues we hit and how we solved them
Oxy is Cloudflare's Rust-based next generation proxy framework
In this blog post, we are proud to introduce Oxy - our modern proxy framework, developed using the Rust programming language
How we built an open-source SEO tool using Workers, D1, and Queues
In this blog post, I’m excited to show off some of the new tools in Cloudflare’s developer arsenal, D1 and Queues, to prototype and ship an internal tool for our SEO experts at Cloudflare.
How Rust and Wasm power Cloudflare's 1.1.1.1
Introducing a new DNS platform that powers 1.1.1.1 and various other products.
ROFL with a LOL: rewriting an NGINX module in Rust
Cloudflare engineers rewrote cf-html, an old NGINX module, in Rust. This project revealed much about NGINX, potentially leading to its full replacement in Cloudflare's infrastructure.
One year of war in Ukraine: Internet trends, attacks, and resilience
This blog post reports on Internet insights during an historical war in Europe that has been seen and shared online, and discusses how Ukraine's Internet remained resilient in spite of dozens of disruptions in three different stages of the conflict.
The Chief Zero Trust Officer: a new role for a new era of cybersecurity
Implementing Zero Trust can be challenging, and efforts may stall. The need for a Chief Zero Trust Officer (CZTO) is driven by the increasing importance of Zero Trust security in the face of escalating cyber attacks.
So long, and thanks for all the deployments: deprecating Wrangler v1
Version 1 of Wrangler has served us well for years. But with a new major version to focus on, it’s time to say goodbye
Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack
This was a weekend of record-breaking DDoS attacks. Over the weekend, Cloudflare detected and mitigated dozens of hyper-volumetric DDoS attacks. The majority of attacks peaked in the ballpark of 50-70 million requests per second (rps) with the largest exceeding 71 million rps
A look at Internet traffic trends during Super Bowl LVII
We look at who the biggest winners were among Super Bowl advertisers, and examine traffic trends for food delivery services, social media, and sports and betting sites. We also review city and state-level traffic trends, as well as related email threat volume in the weeks ahead of the game
Welcome to Wildebeest: the Fediverse on Cloudflare
Today we're announcing Wildebeest, an open-source, easy-to-deploy ActivityPub and Mastodon-compatible server built entirely on top of Cloudflare's Supercloud.
How Cloudflare erroneously throttled a customer’s web traffic
Today’s post is a little different. It’s about a single customer’s website not working correctly because of incorrect action taken by Cloudflare.
Manage and control the use of dedicated egress IPs with Cloudflare Zero Trust
Administrators can now use Gateway traffic egress policies to determine which egress IPs are used when.
Get notified about the most relevant events with Advanced HTTP Alerts
Today we’re adding more flexibility to HTTP alerting, enabling customers to customize the types of activity they’re alerted on and how those alerts are organized.
Uptick in healthcare organizations experiencing targeted DDoS attacks
Over the past few days, Cloudflare, as well as other sources, have observed healthcare organizations targeted by a pro-Russian hacktivist group claiming to be Killnet.
Cloudflare's handling of a bug in interpreting IPv4-mapped IPv6 addresses
Recently, a vulnerability was reported to our bug bounty about a bug in the way some of our code interprets IPv4 addresses mapped into IPv6 addresses.
CVE-2022-47929: traffic control noqueue no problem?
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands.
Towards a global framework for cross-border data flows and privacy protection
In our third and final blog post leading up to Data Privacy Day, we drill down into the challenges for cross-border data flows, in particular personal data transfers from the EU to the US.
Inside Geo Key Manager v2: re-imagining access control for distributed systems
Using the story of Geo Key Manager v2 as an example, let’s re-imagine access control for distributed systems using a variant of public-key cryptography, called attribute-based encryption.
Cyberattacks on Holocaust educational websites increased in 2022
Today, 78 years after the liberation of the Auschwitz death camp, we mark the International Holocaust Remembrance Day. With Cloudflare’s Project Galileo, we protect Holocaust educational websites and at risk public interest groups. Read more to see how attacks on these groups increased in 2022.
Navigating the changing data localization landscape with Cloudflare’s Data Localization Suite
We continue to expand and improve our data localization suite to help support our customers who have to comply with data localization requirements
Cloudflare incident on January 24, 2023
Several Cloudflare services became unavailable for 121 minutes on January 24th, 2023 due to an error releasing code that manages service tokens. The incident degraded a wide range of Cloudflare products
Armed to Boot: an enhancement to Arm's Secure Boot chain
Enhancing the Arm Secure Boot chain to improve platform security on modern systems.
Intelligent, automatic restarts for unhealthy Kafka consumers
At Cloudflare, we take steps to ensure we are resilient against failure at all levels of our infrastructure. This includes Kafka, which we use for critical workflows such as sending time-sensitive emails and alerts.
Internet disruptions overview for Q4 2022
In this post, we review selected Internet disruptions observed by Cloudflare during the fourth quarter of 2022, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause or common geography.
Introducing Waiting Room Bypass Rules
Waiting Room now offers customers more fine-tuned control over what traffic a waiting room covers. Queue only the traffic you want to with Bypass Waiting Room Rules, now available to all Enterprise customers with an Advanced Purchase of Waiting Room.
Three new winners of Project Jengo, and more defeats for the patent troll
Announcing three new winners of Project Jengo, and a major case update in our ongoing fight against the patent troll Sable Networks.
CIO Week 2023 recap
Learn about all the new products, partnerships, and innovations Cloudflare announced during CIO Week to help organizations modernize their IT and security.
Cloudflare Zero Trust for managed service providers
Adding new features to Cloudflare Zero Trust for Managed Service Providers using Gateway DNS.
Give us a ping. (Cloudflare) One ping only.
Now Zero Trust administrators can use the familiar debugging tools that we all know and love like ping, traceroute, and MTR to test connectivity to private network destinations running behind their Tunnels
China Express: Cloudflare partners to boost performance in China for corporate networks
China Express is a suite of connectivity and performance offerings designed to improve application performance for users in China.
Cloudflare Application Services for private networks: do more with the tools you already love
Today, we’re excited to announce new integrations that make it possible to unlock operational and cost efficiencies for IT teams by allowing them to do more with fewer tools, and enable new use cases that are impossible without Cloudflare’s “every service everywhere” architecture.
Announcing SCIM support for Cloudflare Access & Gateway
Cloudflare Access & Gateway now support the System for Cross-domain Identity Management (SCIM) protocol.
Zone Versioning is now generally available
Safely configure and deploy updates to zone configuration with Zone Versioning now Generally Available for Enterprise customers
Expanding our Microsoft collaboration: proactive and automated Zero Trust security for customers
As CIOs navigate the complexities of stitching together multiple solutions, we are extending our collaboration with Microsoft to create one of the best Zero Trust solutions available.
Cloudflare's CASB integration with Salesforce and Box
Cloudflare CASB adds two new SaaS integrations for Salesforce and Box.
How Cloudflare CASB and DLP work together to protect your data
Cloudflare CASB and DLP will work together to protect sensitive data at rest.
How Cloudflare Area 1 and DLP work together to protect data in email
Customers can leverage the power of Email Security and Cloudflare One to prevent data loss in their corporate network.
Improved access controls: API access can now be selectively disabled
Making it easier for account owners to view and manage the access their users have on an account by allowing them to restrict API access to the account.
One-click data security for your internal and SaaS applications
Protect sensitive data on any Access app for any user on any device.
Why do CIOs choose Cloudflare One?
Over 10,000 organizations trust Cloudflare One to connect and secure users, devices, applications, and data. Hear from the leaders of our customers to better understand why they selected Cloudflare.
Cloudflare DDoS threat report for 2022 Q4
In Q4, Cloudflare mitigated millions of DDoS attacks. Attack durations increase, volumetric attacks surged, and ransom DDoS attacks persist. Travel & events industries were hit hardest and over 90% of traffic to Chinese Internet properties were L3/4 DDoS attacks. Read more on our recent report.
Announcing the Authorized Partner Service Delivery Track for Cloudflare One
This week we’re announcing the Authorized Services Delivery Partner (ASDP) Track designed to validate partners that want to deliver services around Cloudflare One
Announcing Custom DLP profiles
Cloudflare Data Loss Prevention now offers the ability to create custom detections.
Preview any Cloudflare product today
Enterprise customers can now start previewing non-contracted services
Network detection and settings profiles for the Cloudflare One agent
Cloudflare WARP can now securely detect pre-configured locations and route traffic based on the needs of the organization for that location.
New ways to troubleshoot Cloudflare Access 'blocked' messages
Investigate, allow or block decisions based on how a connection was made with the same level of ease that you can troubleshoot user identity.
Cloudflare protection for all your cardinal directions
In this post, we’ll recap how definitions of corporate network traffic have shifted and how Cloudflare One provides protection for all traffic flows, regardless of source or destination.