Improving the accuracy of our machine learning WAF using data augmentation and sampling
Data Generation and Augmentation methods to train an effective machine learning WAF
Blocking Kiwifarms
We have blocked Kiwifarms. Visitors to any of the Kiwifarms sites that use any of Cloudflare's services will see a Cloudflare block page and a link to this post.
Log analytics using ClickHouse
When a request at Cloudflare throws an error, information gets logged in our requests_error pipeline. The error logs are used to help troubleshoot customer-specific or network-wide issues
Introducing thresholds in Security Event Alerting: a z-score love story
Today we are excited to announce thresholds for our Security Event Alerts: a new and improved way of detecting anomalous spikes of security events on your Internet properties. By introducing a threshold, we are able to make alerts more accurate and only notify you when it truly matters
Performance isolation in a multi-tenant database environment
Enforcing stricter performance isolation across neighboring tenants who rely on our storage infrastructure
Open sourcing our fork of PgBouncer
We are releasing our internal fork of PgBouncer, filled with authentication bug fixes and new features around per user and connection pool isolation
Deep dives & how the Internet works
We have amazing deep dives in our blog, but also research and how the Internet works kind of stories. Here are some highlights from 2022, and before (with glimpses of our history).
Cloudflare Support Portal gets an overhaul
The Cloudflare Support team has launched a new Support Portal. The portal will give you access to self-help resources, diagnostics with troubleshooting guides, and will provide for easier ticket submission
Crawler Hints supports Microsoft’s IndexNow in helping users find new content
Cloudflare is uniquely positioned to help give crawlers hints about when they should recrawl, if new content has been added, or if content on a site has recently changed
2022 attacks! An August reading list to go “Shields Up”
In 2022, cybersecurity, more than ever, is a must-have for those who don’t want to take chances on getting caught in a cyberattack with difficult to deal with consequences. Here’s a reading list what you need to know about attacks that is also a guide on how to be protected
The mechanics of a sophisticated phishing scam and how we stopped it
Yesterday, August 8, 2022, Twilio shared that they’d been compromised by a targeted phishing attack. Around the same time as Twilio was attacked, we saw an attack with very similar characteristics also targeting Cloudflare’s employees
Introducing new Cloudflare for SaaS documentation
Cloudflare for SaaS offers a suite of Cloudflare products and add-ons to improve the security, performance, and reliability of SaaS providers. Now, the Cloudflare for SaaS documentation outlines how to optimize it in order to meet your goals
1.1.1.1 + WARP: More features, still private
We’re announcing two major improvements to our 1.1.1.1 + WARP apps
Build your next big idea with Cloudflare Pages
We believe every developer deserves to dream big without breaking the bank. That's why on Cloudflare Pages you can get unlimited requests, bandwidth, seats and projects --- for free!
Building a scheduling system with Workers and Durable Objects
In this post we're going to show you how to build a scalable service that will schedule HTTP requests on a specific schedule or as one-off at a specific time
Experiment with post-quantum cryptography today
The future is post quantum. Enable post-quantum key agreement on your test zone today and get a headstart
Building and using Managed Components with WebCM
This is how Managed Components can be useful for you right now, if you manage a website or if you’re building third-party tools
Load Balancing with Weighted Pools
Today, we’re excited to announce a frequently requested feature for our Load Balancer – Weighted Pools
Running Zig with WASI on Cloudflare Workers
After the recent announcement regarding WASI support in Workers I decided to see what it would take to get code written in Zig to run as a Worker, and it turned out to be pretty trivial. This post documents the process I followed
When the window is not fully open, your TCP stack is doing more than you think
In this blog post I'll share my journey deep into the Linux networking stack, trying to understand the memory and window management of the receiving side of a TCP connection
Cloudflare deployment in Guam
Cloudflare Deployment in Guam - Delivering a Better Internet for Faraway Pacific Ocean Archipelagos Residents
Using Apache Kafka to process 1 trillion inter-service messages
We learnt a lot about Kafka on the way to 1 trillion messages, and built some interesting internal tools to ease adoption that will be explored in this blog post
A story about AF_XDP, network namespaces and a cookie
A crash in a development version of flowtrackd (the daemon that powers our Advanced TCP Protection) highlighted that libxdp (and specifically the AF_XDP part) was not Linux network namespace aware.
Working in public — our docs-as-code approach
Besides following a docs-as-code approach, at Cloudflare we handle our documentation changes in a public repository. The contributions we get from the entire Cloudflare community help us make our documentation better every day
Mantis - the most powerful botnet to date
We named the botnet that launched the 26M rps (requests per second) DDoS attack "Mantis" as it is also like the Mantis shrimp, small but very powerful
How the James Webb Telescope's cosmic pictures impacted the Internet
We show how the July 11-12 James Webb Telescope images that were revealed had an impact on DNS traffic in NASA and ESA websites, video and image hosting platforms, and news websites. The ‘cosmic’ results may be surprising
25,000 new trees in Nova Scotia
Cloudflare is proud to announce the first 35,000 trees from our commitment to help clean up bad bots (and the climate) have been planted
Waiting Room Event Scheduling protects your site during online events
With Event Scheduling for Waiting Room, you can protect your servers from being overloaded during your event while delivering a user experience that is unique to the occasion and consistent with your brand
Introducing Location-Aware DDoS Protection
Location-Aware DDoS Protection is now available in beta for Cloudflare Enterprise customers that are subscribed to the Advanced DDoS service
NIST’s pleasant post-quantum surprise
On Tuesday, the US National Institute of Standards and Technology (NIST) announced which post-quantum cryptography they will standardize.
Cloudflare’s view of the Rogers Communications outage in Canada
An outage at one of the largest ISPs in Canada, Rogers Communications, started earlier today, July 8, 2022, and is ongoing (eight hours and counting), and is impacting businesses and consumers.
Automatic Signed Exchanges may dramatically boost your site visitor numbers
Automatic Signed Exchanges may dramatically boost your site visitor numbers
Announcing support for WASI on Cloudflare Workers
Today, we are announcing experimental support for WASI (the WebAssembly System Interface) on Cloudflare Workers and support within wrangler2 to make it a joy to work with
New WAF intelligence feeds
Cloudflare is expanding our WAF’s threat intelligence capabilities by adding four new managed IP lists that can be used as part of any custom firewall rule
DDoS attack trends for 2022 Q2
Welcome to our 2022 Q2 DDoS report. This report includes insights and trends about the DDoS threat landscape — as observed across the global Cloudflare network
Internet disruptions overview for Q2 2022
In this post, we review selected Internet disruptions observed by Cloudflare during the second quarter of 2022, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools.
Making Page Shield malicious code alerts more actionable
In this post we go over improvements to script status, metadata and categorization.
A July 4 technical reading list
Here’s a short list of recent technical blog posts to give you something to read today
Optimizing TCP for high WAN throughput while preserving low latency
In this post, we describe how we modified the Linux kernel to optimize for both low latency and high throughput concurrently
Managed Transforms: templated HTTP header modifications
Customize multiple HTTP headers with a single click using Cloudflare Managed Transforms
Live-patching security vulnerabilities inside the Linux kernel with eBPF Linux Security Module
Learn how to patch Linux security vulnerabilities without rebooting the hardware and how to tighten the security of your Linux operating system with eBPF Linux Security Module
Internet Explorer, we hardly knew ye
With the recent retirement of Microsoft Internet Explorer 11, we analyzed Internet Explorer traffic trends. Breaking the traffic down by bot score revealed much of this traffic is “likely automated”
Hertzbleed explained
Hertzbleed is a brand-new family of side-channel attacks that monitors changes on CPU frequency
New partner program for SMB agencies & hosting partners now in closed beta
Today, we want to reinforce our commitment to our hosting ecosystem and small business partners that leverage Cloudflare to help bring a better Internet experience to their customers.
Network performance update: Cloudflare One Week June 2022
We’re excited to share that Cloudflare has the fastest provider in 1,290 of the top 3,000 most reported networks, up from 1,280 even one month ago during Platform Week
Identifying content gaps in our documentation
As a technical writer, it’s pretty common to do the thing you’re documenting. After all, it’s really hard to write step-by-step instructions if you haven’t been through those steps. It’s also a great opportunity to provide feedback to our product teams
How Cloudflare Security does Zero Trust
How Cloudflare’s security team implemented Zero Trust controls
Kubectl with Cloudflare Zero Trust
Using Cloudflare Zero Trust with Kubernetes to enable kubectl without SOCKS proxies
Cloudflare One vs Zscaler Zero Trust Exchange: who is most feature complete? It’s not who you might expect
How does Cloudflare One compare to Zscaler's Trust Exchange. Read on to find out.
Decommissioning your VDI
This blog offers Cloudflare’s perspective on how remote browser isolation can help organizations offload internal web application use cases currently secured by virtual desktop infrastructure (VDI)
HTTP/3 inspection on Cloudflare Gateway
Today we’re excited to announce the ability for administrators to apply Zero Trust inspection policies to HTTP/3 traffic
Connect to private network services with Browser Isolation
Browser Isolation with private network connectivity enables your users to securely access private web services without installing any software or agents on an endpoint device or absorbing the management and cost overhead of serving virtual desktops
A stronger bridge to Zero Trust
Today, we’re announcing more enhancements to the Cloudflare One platform that make a transition from legacy architecture to the Zero Trust network of the future easier than ever
Cloudflare integrates with Microsoft Intune to give CISOs secure control across devices, applications, and corporate networks
Cloudflare integrates with Microsoft Intune and combines the power of Cloudflare’s expansive network and Zero Trust suite with Endpoint Manager
Early Hints update: How Cloudflare, Google, and Shopify are working together to build a faster Internet for everyone
During a time of uncertainty due to the global pandemic, a time when everyone was more online than ever before, Cloudflare, Google, and Shopify all came together to build and test Early Hints
Using Cloudflare Tunnel and Access with Postgres
How the Database team uses Cloudflare Tunnels internally to improve security and usability of adhoc DB queries
Cloudflare Gateway dedicated egress and egress policies
Cloudflare Gateway customers can now utilize dedicated egress IPs and soon will be able to control how these IPs are applied via egress policies
MPLS to Zero Trust in 30 days
‘My home network is faster than my corporate network’’ is a common complaint of the employees returning to work. Legacy MPLS based networks were not built to support the shift in the applications.
How to augment or replace your VPN with Cloudflare
Offloading key applications from your traditional VPN to a cloud-native ZTNA solution like Cloudflare Access is a great place to start with Zero Trust and provides an approachable, meaningful upgrade for your business
Cloudflare recognized by Microsoft as a Security Software Innovator
Cloudflare recently won the Security Software Innovator award in recognition of our transformative technology in collaboration with Microsoft that makes work easier for our mutual customers