Introducing Configuration Rules
Configuration Rules is the new and improved way for Cloudflare customers to control and manipulate features that are enabled or disabled for specific requests on their zone.
WebRTC live streaming to unlimited viewers, with sub-second latency
Cloudflare Stream now supports live streaming over WebRTC to unlimited concurrent viewers, using open standards WHIP and WHEP, with zero dependencies or client SDKs necessary.
Where to? Introducing Origin Rules
Origin Rules is a dedicated product for ‘where does this traffic go where it leaves Cloudflare.’ Customers are able to match on an HTTP request using filters and override the host, port, SNI, and the origin a request resolves to.
Introducing Cache Rules: precision caching at your fingertips
We have spent the last ten years learning how customers use Page Rules to customize their cached content, and it’s clear the time is ripe for evolving rules-based caching on Cloudflare
Build your next startup on Cloudflare with our comprehensive Startup Plan, v2.0
The Startup Plan now has an expanded product basket and broader eligibility criteria, which means more startups now qualify for the program.
Cloudflare Queues: globally distributed queues without the egress fees
Cloudflare Queues is a message queuing service that allows applications to reliably send and receive messages using Cloudflare Workers
Dynamic URL redirects: 301 to the future
With Dynamic redirects, users can redirect visitors to another webpage or website based upon hundreds of options such as the visitor's country of origin or language, without having to write a single
Bringing Zero Trust to mobile network operators
Better together: 5G mobile networks and Cloudflare’s all-in-one SASE platform
Securing the Internet of Things
We’ve been defending customers from Internet of Things botnets for years now, and it’s time to turn the tides: we’re bringing the same security behind our Zero Trust platform to IoT
The first Zero Trust SIM
We’re announcing the first Zero Trust SIM: the next major part of Cloudflare One, combining both software and hardware layers to rethink mobile device security for organizations
Cloudflare’s 2022 Annual Founders’ Letter
Cloudflare launched on September 27, 2010. This week we'll celebrate our 12th birthday. As has become our tradition, we'll be announcing a series of products that we think of as our gifts back to the Internet
GA Week 2022: what you may have missed
We made a lot of new products Generally Available this week, so in case you missed it, here’s a recap
How to enable Private Access Tokens in iOS 16 and stop seeing CAPTCHAs
Nobody likes CAPTCHAs. Now, with iOS 16 on iPhones, a small enabled toggle can make them disappear while improving privacy on your device. Here’s how to check if it’s “on” and try it out
Regional Services comes to India, Japan and Australia
With Regional Services, we are thrilled to expand our coverage to these countries in Asia Pacific, allowing more customers to use Cloudflare by giving them precise control over which parts of the Cloudflare network are able to perform advanced functions
Cloudflare Zaraz supports Managed Components and DLP to make third-party tools private
Third party tools are the only thing you can’t control on your website, unless you use Managed Components with Cloudflare Zaraz
API Endpoint Management and Metrics are now GA
API Shield customers can save, update, and monitor the performance of API endpoints
Protests spur Internet disruptions in Iran
The Iranian government has disrupted Internet connectivity in response to recent protests over the death of a woman while in police custody
Logpush: now lower cost and with more visibility
Logpush jobs can now be filtered to contain only logs of interest. Also, you can receive alerts when jobs are failing, as well as get statistics on the health of your jobs
R2 is now Generally Available
R2 is now generally available!! R2 gives developers object storage minus the egress fees
Stream Live is now Generally Available
Stream Live is now out of beta, available to everyone, and ready for production traffic at scale
Store and retrieve your logs on R2
Log Storage on R2: a cost-effective solution to store event logs for any of our products
SVG support in Cloudflare Images
Cloudflare Images now supports storing and delivering SVG files
Going originless with Cloudflare Workers – Building a Todo app – Part 1: The API
Custom Domains are now in Generally Available! Today we go through Part 1 in a series on building completely serverless applications on Cloudflare’s Developer Platform
The easiest way to build a modern SaaS application
With Workers for Platforms, your customers can build custom logic to meet their needs right into your application. We’re excited to announce that Workers for Platforms is now in GA for all Enterprise customers
Cloudflare Area 1 - how the best email security keeps getting better
Cloudflare started using Area 1 in 2020 and proceeded with acquiring the company in 2022. We were most impressed how phishing, responsible for 90+% of cyberattacks, basically became a non-issue overnight when we deployed Area 1. But our vision is much bigger than preventing phishing attacks
Cloudflare Data Loss Prevention now Generally Available
Data Loss Prevention is now available for Cloudflare contract customers, giving customers more options to protect their sensitive data
Detect security issues in your SaaS apps with Cloudflare CASB
Connect and scan your third-party SaaS apps for file leaks, misconfigurations, and Shadow IT, all in just a few clicks. Cloudflare CASB now Generally Available
Isolate browser-borne threats on any network with WAN-as-a-Service
Defend any network from browser-borne threats with Cloudflare Browser Isolation by connecting legacy firewalls over IPsec / GRE
Introducing Cloudflare Adaptive DDoS Protection - our new traffic profiling system for mitigating DDoS attacks
Cloudflare’s new Adaptive DDoS Protection system learns your unique traffic patterns and constantly adapts to protect you against sophisticated DDoS attacks
Introducing Advanced DDoS Alerts
Cloudflare’s Advanced DDoS Alerts provide tailored and actionable notifications in real-time
Account WAF now available to Enterprise customers
Do you manage more than a single domain? If the answer is yes, now you can manage a single WAF configuration for all your enterprise domains
Improved Access Control: Domain Scoped Roles are now generally available
Starting today, it is possible to scope your users’ access to specific domains with Domain Scoped Roles becoming generally available
Welcome to GA Week
Over the course of the next week, you’re going to hear about Cloudflare products that are out of beta and generally available
Using Cloudflare R2 as an apt/yum repository
Host your apt/yum repositories like how Cloudflare Tunnel does. Here's how
How we built Pingora, the proxy that connects Cloudflare to the Internet
Today we are excited to talk about Pingora, a new HTTP proxy we’ve built in-house using Rust that serves over 1 trillion requests a day
Ethereum Gateway support for Görli + Sepolia Testnets and the Ethereum Merge
Today we are excited to announce support for the upcoming Ethereum Merge and Sepolia and Görli testnet support
Cloudflare named a Leader by Gartner
Gartner has recognised Cloudflare as a Leader in the 2022 "Gartner® Magic Quadrant™ for Web Application and API Protection (WAAP)" report that evaluated 11 vendors for their ‘ability to execute’ and ‘completeness of vision’
Improving the accuracy of our machine learning WAF using data augmentation and sampling
Data Generation and Augmentation methods to train an effective machine learning WAF
Blocking Kiwifarms
We have blocked Kiwifarms. Visitors to any of the Kiwifarms sites that use any of Cloudflare's services will see a Cloudflare block page and a link to this post.
Log analytics using ClickHouse
When a request at Cloudflare throws an error, information gets logged in our requests_error pipeline. The error logs are used to help troubleshoot customer-specific or network-wide issues
Introducing thresholds in Security Event Alerting: a z-score love story
Today we are excited to announce thresholds for our Security Event Alerts: a new and improved way of detecting anomalous spikes of security events on your Internet properties. By introducing a threshold, we are able to make alerts more accurate and only notify you when it truly matters
Performance isolation in a multi-tenant database environment
Enforcing stricter performance isolation across neighboring tenants who rely on our storage infrastructure
Open sourcing our fork of PgBouncer
We are releasing our internal fork of PgBouncer, filled with authentication bug fixes and new features around per user and connection pool isolation
Deep dives & how the Internet works
We have amazing deep dives in our blog, but also research and how the Internet works kind of stories. Here are some highlights from 2022, and before (with glimpses of our history).
Cloudflare Support Portal gets an overhaul
The Cloudflare Support team has launched a new Support Portal. The portal will give you access to self-help resources, diagnostics with troubleshooting guides, and will provide for easier ticket submission
Crawler Hints supports Microsoft’s IndexNow in helping users find new content
Cloudflare is uniquely positioned to help give crawlers hints about when they should recrawl, if new content has been added, or if content on a site has recently changed
2022 attacks! An August reading list to go “Shields Up”
In 2022, cybersecurity, more than ever, is a must-have for those who don’t want to take chances on getting caught in a cyberattack with difficult to deal with consequences. Here’s a reading list what you need to know about attacks that is also a guide on how to be protected
The mechanics of a sophisticated phishing scam and how we stopped it
Yesterday, August 8, 2022, Twilio shared that they’d been compromised by a targeted phishing attack. Around the same time as Twilio was attacked, we saw an attack with very similar characteristics also targeting Cloudflare’s employees
Introducing new Cloudflare for SaaS documentation
Cloudflare for SaaS offers a suite of Cloudflare products and add-ons to improve the security, performance, and reliability of SaaS providers. Now, the Cloudflare for SaaS documentation outlines how to optimize it in order to meet your goals
1.1.1.1 + WARP: More features, still private
We’re announcing two major improvements to our 1.1.1.1 + WARP apps
Build your next big idea with Cloudflare Pages
We believe every developer deserves to dream big without breaking the bank. That's why on Cloudflare Pages you can get unlimited requests, bandwidth, seats and projects --- for free!
Building a scheduling system with Workers and Durable Objects
In this post we're going to show you how to build a scalable service that will schedule HTTP requests on a specific schedule or as one-off at a specific time
Experiment with post-quantum cryptography today
The future is post quantum. Enable post-quantum key agreement on your test zone today and get a headstart
Building and using Managed Components with WebCM
This is how Managed Components can be useful for you right now, if you manage a website or if you’re building third-party tools
Load Balancing with Weighted Pools
Today, we’re excited to announce a frequently requested feature for our Load Balancer – Weighted Pools
Running Zig with WASI on Cloudflare Workers
After the recent announcement regarding WASI support in Workers I decided to see what it would take to get code written in Zig to run as a Worker, and it turned out to be pretty trivial. This post documents the process I followed
When the window is not fully open, your TCP stack is doing more than you think
In this blog post I'll share my journey deep into the Linux networking stack, trying to understand the memory and window management of the receiving side of a TCP connection
Cloudflare deployment in Guam
Cloudflare Deployment in Guam - Delivering a Better Internet for Faraway Pacific Ocean Archipelagos Residents
Using Apache Kafka to process 1 trillion inter-service messages
We learnt a lot about Kafka on the way to 1 trillion messages, and built some interesting internal tools to ease adoption that will be explored in this blog post
A story about AF_XDP, network namespaces and a cookie
A crash in a development version of flowtrackd (the daemon that powers our Advanced TCP Protection) highlighted that libxdp (and specifically the AF_XDP part) was not Linux network namespace aware.
