Internet shut down in Kazakhstan amid unrest
In Kazakhstan, the year had barely got going when yesterday disruptions of Internet access ended up in a nationwide Internet shutdown from today, January 5, 2022
How The Gambia lost access to the Internet for more than 8 hours
On the morning of January 4, 2022, citizens of The Gambia woke up to a country-wide Internet outage
Looking Forward: Some Predictions for 2022
As we approach the end of the year, let's look ahead at some trends and predictions for 2022
Cloudflare Radar's 2021 Year In Review
In 2021, we continued to live with the effects of the COVID pandemic and Internet traffic was also impacted (differently than in 2020) from it.
In 2021, the Internet went for TikTok, space and beyond
Join us in our Year in Review 2021 focused on the most popular domains-websites
Supporting Remix with full stack Cloudflare Pages
Cloudflare Pages now natively supports full stack Remix applications
From 0 to 20 billion - How We Built Crawler Hints
Cloudflare Is reducing the environmental impact of web searches with 20+ billions crawler hints delivered so far. This blog describes the technical solution of how we built the Crawler Hints system that makes all this possible.
Protection against CVE-2021-45046, the additional Log4j RCE vulnerability
This vulnerability is actively being exploited and anyone using Log4J should update to version 2.16.0 as soon as possible. Latest version is available on the Log4J download page.
An exposed apt signing key and how to improve apt security
Recently, we received a bug bounty report regarding the GPG signing key used for pkg.cloudflareclient.com, the Linux package repository for our Cloudflare WARP products.
Exploitation of Log4j CVE-2021-44228 before public disclosure and evolution of evasion and exfiltration
This article covers WAF evasion patterns and exfiltration attempts, trend data on attempted exploitation, and information on exploitation that we saw prior to the public disclosure of CVE-2021-44228.
Sanitizing Cloudflare Logs to protect customers from the Log4j vulnerability
Many Cloudflare customers consume their logs using software that uses Log4j, so we are mitigating any exploit attempts via Cloudflare Logs.
Maximum redirects, minimum effort: Announcing Bulk Redirects
Bulk Redirects is a new product that allows an administrator to upload and enable hundreds of thousands of URL redirects within minutes, without having to write a single line of code.
Version and Stage Configuration Changes with HTTP Applications in Beta
Today, we are announcing a closed beta of HTTP Applications: a new way to safely test and deploy changes to your HTTP traffic
Updates to Cloudflare Security and Privacy Certifications and Reports
Customer confidence in our ability to handle their sensitive information in an ever-changing regulatory landscape has to be as solid as our offerings, so we have expanded the scope of our previously-existing compliance validations; not only that, we’ve also managed to obtain a couple of new ones.
How Cloudflare Is Solving Network Interconnection for CIOs
Instant network provisioning in over 1000 new locations coming over the next year makes it faster and easier than ever to interconnect with Cloudflare.
What’s new with Notifications?
We know that notifications are incredibly important to our customers. Cloudflare sits in between your Internet property and the rest of the world. When something goes wrong, you want to know right away because it could have a huge impact on your end users.
All the Platform Improvements We’ve Made in 2021 to Make CIOs Lives Easier
While over time best practices and technologies change, we aim to ensure our platform meets the security needs and depth of control that our customers require. In that spirit, we have been busy over the past year delivering important updates to many of our platform services.
How Cloudflare security responded to Log4j 2 vulnerability
Yesterday, December 9, 2021, when a serious vulnerability in the popular Java-based logging package log4j was publicly disclosed, our security teams jumped into action to help respond to the first question and answer the second question. This post explores the second.
Actual CVE-2021-44228 payloads captured in the wild
I wrote earlier about how to mitigate CVE-2021-44228 in Log4j, how the vulnerability came about and Cloudflare’s mitigations for our customers. As I write we are rolling out protection for our FREE customers as well because of the vulnerability’s severity.
Introducing Cloudflare Domain Protection — Making Domain Compromise a Thing of the Past
Today we are announcing secure domain registrations bundled into enterprise contracts.
CVE-2021-44228 - Log4j RCE 0-day mitigation
A zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) was made public on December 9, 2021, that results in remote code execution (RCE).
Argo for Packets is Generally Available
Today, we’re announcing the general availability of Argo for Packets, which provides IP layer network optimizations to supercharge your Cloudflare network services products.
Cloudflare One helps optimize user connectivity to Microsoft 365
Cloudflare One partners with Microsoft to optimize user connectivity to Microsoft 365
Cloudflare announces integrations with MDM companies
Today, we’re excited to announce new integrations with mobile device management vendors Microsoft, Ivanti, JumpCloud, Kandji, and Hexnode to make the deployment of Cloudflare WARP even easier.
Cloudflare Agent — Seamless Deployment at Scale
Today we are excited to announce our zero trust agent now has feature parity across all major platforms.
Secure how your servers connect to the Internet today
The vulnerability disclosed yesterday in the Java-based logging package, log4j, allows attackers to execute code on a remote server. We’ve updated Cloudflare’s WAF to defend your infrastructure against this 0-day attack.
Cloudflare announces partnerships with leading cyber insurers and incident response providers
Cloudflare partners with leading cyber insurers and incident response providers to help customers reduce their insurance premiums and improve cyber risk.
Introducing Cloudflare Security Center
We're launching Security Center, making attack surface management actionable and accessible, built on Cloudflare’s unique visibility into Internet activity and expertise on security best practices.
How to customize your layer 3/4 DDoS protection settings
Cloudflare Enterprise customers using the Magic Transit and Spectrum services can now tune and tweak their L3/4 DDoS protection settings directly from the Cloudflare dashboard or via the Cloudflare API.
Tip of the ICEberg for Cloud-Native Email Security: Area 1 Named in the Gartner™ Market Guide for Email Security
Gone are the days of the Secure Email Gateway (SEG) being an option. Cloud-native email protection with multiple deployment options are now changing the game. With winter in our minds, it’s time to start talking about “ICE.”
Magic Firewall gets Smarter
To improve security, we’re adding threat intel integration and geo-blocking. For visibility, we’re packet captures at the edge, a way to see packets arrive at the edge in near real-time.
Cloudflare acquires Zaraz to enable cloud loading of third-party tools
We are excited to announce the acquisition of Zaraz by Cloudflare, and the launch of a beta version of the Zaraz product. You can use Zaraz (beta) to manage and load third-party tools on the cloud, and achieve significant speed, privacy and security improvements.
Why Cloudflare Bought Zaraz
Today we're excited to announce that Cloudflare has acquired Zaraz. The Zaraz value proposition aligns with Cloudflare's mission. They aim to make the web more secure, more reliable, and faster. And they built their solution on Cloudflare Workers.
Guest Blog: k8s tunnels with Kudelski Security
At Kudelski Security, we've been working on implementing our Zero Trust strategy for the last two years. In many aspects, it's been an incredible journey, and although we're not quite finished yet, we're excited by the progress made so far with Cloudflare.
Introducing Clientless Web Isolation
Safely browse risky and sensitive websites on any device without installing any software
Extending Cloudflare’s Zero Trust platform to support UDP and Internal DNS
Last year, we launched a new feature which empowered users to begin building a private network on Cloudflare. Today, we’re excited to announce even more features which make your Zero Trust migration easier than ever.
Page Shield is generally available
To help identify and mitigate supply chain attacks in the context of web applications, today we are launching Page Shield in General Availability (GA).
Zero Trust Private Networking Rules
Earlier this year, we announced the ability to build a private network on Cloudflare’s network with identity-driven access controls. We’re excited to share that you will soon be able to extend that control to sessions and login intervals as well.
Zaraz use Workers to make third-party tools secure and fast
Zaraz fundamentally changes how third-parties are loaded on the web. Learn how we built it from the ground up, and why we chose Cloudflare Worker to power it.
Store your Cloudflare logs on R2
We're excited to announce that customers will soon be able to store their Cloudflare logs on Cloudflare R2 storage. Storing your logs on Cloudflare will give CIOs and Security Teams an opportunity to consolidate their infrastructure; creating simplicity, savings and additional security.
Introducing the Customer Metadata Boundary
Cloudflare’s Data Localisation Suite now helps customers localise metadata about their HTTP traffic.
Control input on suspicious sites with Cloudflare Browser Isolation
Protect your team from phishing attacks by controlling user input on suspicious and sensitive websites with Cloudflare Browser Isolation.
Replace your hardware firewalls with Cloudflare One
Today, we’re excited to announce new capabilities to help customers make the switch from hardware firewall appliances to a true cloud-native firewall built for next-generation networks.
Cloudflare One: One Year Later
Cloudflare One helps enterprises build modern enterprise networks, operate efficiently and securely, and throw out on-premise hardware.
How We Used eBPF to Build Programmable Packet Filtering in Magic Firewall
By combining the power of eBPF and Nftables, Magic Firewall can mitigate sophisticated attacks on infrastructure by enforcing a positive security model.
Announcing Anycast IPsec: a new on-ramp to Cloudflare One
Today, we're excited to announce support for IPsec as an on-ramp to Cloudflare One.
How to connect your offices to Cloudflare using SD-WAN
Today, a more modern approach is to use SD-WAN to configure your networks and connect them to Cloudflare’s network, leveraging that as the new corporate backbone. It's quick and easy!
PII and Selective Logging controls for Cloudflare’s Zero Trust platform
Today we’re excited to announce a combination of two features, Zero Trust role-based access and selective logging. With these features, administrators will be able to protect not only their users but also the data their users generate.
Welcome to CIO Week and the future of corporate networks
This week, we’ll demonstrate how Cloudflare One, our Zero Trust Network-as-a-Service, is helping CIOs transform their corporate networks.
Get notified when your site is under attack
Cloudflare can now send proactive notifications about any application security event spike, so you are warned whenever an attack might be targeting your application.
The Grinch Bot is Stealing Christmas!
Bots moved quickly this holiday season, launching over 1 trillion requests on Black Friday but quickly receding after the weekend.
Thanksgiving’s biggest online shopping day was Cyber Monday, but other days were close behind
November comes, the temperatures start to get colder for most of the planet's population (87% live in the Northern Hemisphere) and many are also starting to prepare for the festive season.
Attack Maps now available on Radar
We love line and bar graphs, but some data is best represented with different visualizations. We’re introducing world maps and sankey visualizations as part of Radar Maps, which are being used today to show you the top layer 7 attacks in real time.
How the US paused shopping (and browsing) for Thanksgiving
Throughout the pandemic we saw different trends caused by people being more at home than usual, but Internet patterns also change at specific times of the year (like when students go back to school or when it’s colder outside) or on some holidays like Thanksgiving.
Heard in the halls of Web Summit 2021
Global in-person events are back. We present a few ideas from Web Summit 2021 about the future and where the Internet is going. Check the interviews we’ve done at the event (from the lack of Internet access to Web3).
Everything you ever wanted to know about UDP sockets but were afraid to ask, part 1
Historically Cloudflare's core competency was operating an HTTP reverse proxy. We've spent significant effort optimizing traditional HTTP/1.1 and HTTP/2 servers running on top of TCP.
Announcing Argo for Spectrum
Announcing general availability of Argo for Spectrum, a way to turbo-charge any TCP based application.
Burkina Faso Internet shutdown
People living in Burkina Faso are facing an Internet shutdown. Cloudflare Radar shows that after 22:00 UTC (the same local time) Internet traffic went down significantly, something that has happened in the context of social tensions in the country that started on November 14, 2021.
Sudan was cut off from the Internet for 25 days
The Internet started to come back to Sudan (with limitations) this past Thursday, November 18. This happens after 25 days (three weeks and four days) of an almost complete shutdown that affected the whole country.
Network Performance Update: Full Stack Week
Several months ago, we shared extensive benchmarking results of edge networks around the world, and made a commitment that we would improve in 10% of networks where we were not #1. Here are our results today.