
Many leaks happen because of software bugs and security vulnerabilities. In this post we will learn how the Linux kernel can help protect cryptographic keys from a whole class of potential security vulnerabilities: memory access violations.
OI
Oxana, Ignat·November 28, 2022Security 
Yesterday, November 24, 2022, was Thanksgiving Day in the US. Last year, we saw how the US paused shopping (and browsing) for Thanksgiving. So, how was it this year?

In this blog we'll discuss how we manage Cloudflare IP addresses used to retrieve the data from the Internet, how our egress network design has evolved, how we optimized it for best use of available IP space and introduce our soft-anycast technology

Routing on the Internet follows a few basic principles. Unfortunately not everything on the Internet is created equal, and prepending can do more harm than good. In this blog post we’ll talk about the problems that prepending aims to solve, and some alternative solutions

We are proud to share that Cloudflare has been named one of the Top 100 Most Loved Workplaces in 2022 by Newsweek and Best Practice Institute (BPI)

In this blog post, we will introduce our new system designed to detect route leaks and its integration on Cloudflare Radar and its public API.

Learn how Cloudflare uses our own Workers Analytics Engine product to capture analytics about our own products!

This week we made over 30 announcements, in case you missed any here’s a quick round-up.

Workers Trace Events Logpush gives new levels of visibility into Workers invocations, console.log messages and errors. It is now available to everyone on the Workers Paid and Enterprise plans!

Cloudflare did the measurements to prove we’re the fastest developer platform, beating out all the other competition.

Today, we’re taking local development to the next level by releasing Miniflare 3, powered by the open-source workerd runtime, along with support for migrating existing dashboard projects and using real data locally.

Today, we’re excited to announce the next major release of Workers TypeScript definitions with a bunch of improvements, and the open-sourcing of the new automatic generation scripts.
BC
Brendan Coll·November 18, 2022Frontend 
With Segment Edge SDK, built on Cloudflare Workers, developers can collect high-quality first-party data and use Segment Edge SDK to access real-time user profiles and state, to deliver personalized

Radar 2.0 was launched last month during Cloudflare's Birthday Week as a complete product revamp. This blog explains how we built it technically. Hopefully, it will inspire other developers to build complex web apps using Cloudflare products.

Pages is officially a full stack platform with Pages Functions now Generally Available. Pages is harnessing the power and scalability of Workers and specializing them to align with the Pages developer experience.

Today we are announcing Cloudflare Snippets. Snippets are a simple way of executing a small piece of Javascript on select HTTP requests, using the ruleset engine filtering logic.

Page Functions are now out of beta, bringing the ability to add dynamic server-side rendering to your applications. Pages makes it easy to deploy applications built using all the major frameworks.
PB
Peter Bacon Darwin, Igor·November 17, 2022SRE & Ops 
Today we’re happy to announce Deployments for Workers. Deployments allow developers to audit changes made to their applications.

Announcing the Fall 2022 cohort of 25 Workers Launchpad startups and growth of the program from $1.25BN to $2BN

Cloudflare uses the Cloudflare Terraform provider extensively to make changes to our internal accounts as easy as opening a pull request.
MW
Michael Wolf, Dhaynes·November 17, 2022SRE & Ops 
With Cloudflare Workers, our fragment-based micro-frontend architecture, and fragment piercing technique, engineering teams can incrementally improve large frontends in a fraction of the time, yielding significant user and developer experience gains.
PB
Peter Bacon Darwin, Dario·November 17, 2022Frontend 
In this blog post, I'll show you how to use D1 to add comments to a static blog site. To do this, we'll construct a new D1 database and build a simple JSON API that allows the creation and retrieval of comments.

Cloudflare now has OpenAPI Schemas available for the API. Users can use these schemas in any open source OpenAPI Tooling.

As we continue down the road to making D1 production ready, it wouldn’t be “the Cloudflare way” unless we stopped for feedback first. D1 is now in Open Alpha!

We’re excited to announce that Workers will soon be able to send outbound requests through a mutually authenticated channel via mutual TLS authentication!

Xata is on a mission to solve the industry’s hardest data problems with their Serverless Data Platform. We’re excited to have Xata building their serverless functions product – Xata Workers – on top of Workers for Platforms. Here is Xata’s story.
AR
Alexis Rico, Tanushree·November 16, 2022Databases 
Workers Browser Rendering API is our out-of-the-box solution for simplifying developer workflows, including capturing images or screenshots, by running browser automation in Workers. If you’re interested, sign up for the waitlist.

We’re excited to share that the next iteration of Cloudflare’s API reference documentation is now available. The new docs standardize our API content and improve the overall developer experience for interacting with Cloudflare’s API.

Today we’re extremely excited to announce that Cache Reserve is graduating to open beta – users will now be able to test it and integrate it into their content delivery strategy without any additional waiting

Today we're announcing the R2 Super Slurper, the tool that will enable you to migrate all your data to R2 in a simple and efficient way

Today we’re announcing Cloudflare Logs Engine — a new system that will enable you to do anything you need with Cloudflare Logs, all within Cloudflare

A deep-dive into how Cloudflare uses Durable Objects and the Streams API to index millions of HTTP requests stored in R2

Today, we’re excited to share a collection of ready-made templates to help you build your next application on Cloudflare Workers

Neon.tech is a database platform that allows you to branch your (Postgres compatible) database exactly like your code repository. And with the release of their Cloudflare Workers integration you can get started in minutes
EG
Erwin, George Mackerron·November 15, 2022Databases 
Every developer wants to get code running on one machine and perfect it. It’s so much easier to work that way. We just happen to have one machine that scales to the size of the Internet: a global, distributed, supercomputer. It’s our Supercloud, and we build our own products on it, and you can too

We have been making improvements in the Workers runtime to increase alignment with Web Platform standards around event handling, task cancellation using AbortController, text encoding and decoding, URL parsing and pattern matching, and streams support.

Cloudflare Queues enables developers to build performant and resilient distributed applications that span the globe. Any developer with a paid Workers plan can enroll in the Open Beta and start building today!

DevCycle re-architected their feature management tool using Workers for improved scalability

For Athenian Project and Cloudflare for Campaigns participant websites, overall traffic volume ramped as Election Day approached
DB
David Belson·November 11, 2022Security 
We at Cloudflare are proud to be able to play a role in helping safeguard the integrity of the electoral process. Through our Impact programs, we provide cyber security products to help protect access
AJ
Andie, Jocelyn·November 9, 2022Security 
What happens to the Internet traffic of a country when an important election happens. In Brazil, the first round of the Presidential elections brought a 10% decrease in Internet traffic, but the runoff on Sunday had a bigger: 21% drop

Information on CVE-2022-3602 and CVE-2022-3786, and why Cloudflare was not impacted

In this blog post, we describe a formal, computer-aided security analysis of Oblivious HTTP, an emerging IETF standard that applications can use to improve user privacy

Today, a change to our Tiered Cache system caused some requests to fail for users with status code 530
JG
John Graham Cumming·October 26, 2022SRE & Ops 
Today Email Routing leaves Beta and an update on all the new things we've been adding to the service, including behind-the-scenes and not-so-visible improvements

You can now deploy SSR Next.js applications to the Cloudflare Pages platform ⚡️

Starting today, Page Shield can now watch for malicious outbound connections made by third-party JavaScript code
MT
Michael Tremante·October 21, 2022Frontend 
In this blog-post we demonstrate how hosting and combining multiple server-side rendered micro-frontends on Cloudflare Workers offer a highly scalable, high performance solution to these problems
PB
Peter Bacon Darwin, James Culveyhouse·October 20, 2022Performance 
Cloudflare's peering portal allows users to log in with existing PeeringDB credentials and request peering sessions with cloudflare direct from the portal

In this post, we review selected Internet disruptions observed by Cloudflare during the second quarter of 2022, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause or common geography

In Q3, DDoS attacks increased by 111% YoY, Cloudflare auto-mitigated a 2.5 Tbps attack targeting a Minecraft server as multi-terabit scale DDoS attacks become increasingly frequent. Read more in our 2022 Q3 DDoS Report

We have first adopted the BPF tail calls when building our XDP-based packet processing pipeline. BPF tail calls have served us well since then. But they do have their caveats

Announcing support for sending Early Hints from your Cloudflare Pages projects

Today, we’re excited to announce Total TLS — a one-click feature that will issue individual TLS certificates for every subdomain in our customer’s domains

Starting in a couple of weeks, and continuing through the end of the year, we’re hosting a series of Zero Trust Roadshows in various North American cities

Cloudflare Stream now supports the AV1 codec for live video in open beta, unlocking live-streaming at higher resolution, with lower bandwidth
RB
Renan, Brendan Irvine Broque·October 5, 2022Engineering 
The future of a private and secure Internet is at stake; that is why today we have enabled post-quantum cryptography support for all our customers

Cloudflare's 12th birthday week: 36 announcements ranging from SIM cards to post quantum encryption via hardware keys and so much more. Here’s a review of everything we announced this week
JG
John Graham Cumming·October 3, 2022Security 
Every connection we make post-quantum secure, we remove one opportunity for compromise: that's why we are announcing post-quantum Cloudflare Tunnel to help you secure every connection to our network

Today we’re excited to announce that we will soon be offering a zero-configuration option for security on Cloudflare. If we find that we can automatically upgrade the security connection between Cloudflare and a user’s origin, we will