
One of the most exciting things about serverless is not that you can now build everything in serverless, but that it becomes really easy to connect multiple managed services. Tejas Mehta built cClip by connecting services like RevenueCat, Stripe and Firebase into a fully fledged product.

We are developing an example feature-complete SaaS application that will be built entirely on the Cloudflare stack.

Today, we’re going to build a video application inspired by Cloudflare TV. We’ll have user authentication and the ability for administrators to upload recorded videos or livestream new content. Think about being able to build your own YouTube or Twitch using Cloudflare services!
JA
Jkup, Adam Janis·November 19, 2021Security 
Handling payments inside your apps is crucial to building a business online. For many developers, the leading choice for handling payments is Stripe.

Today, we are extending the Stream Player vision with a series of new customization options to help you deliver the best end-user experience.

Workers is now even more Unbound, with no egress, more execution time, and more scripts.

The Cloudflare Developer Expert Program rewards developers who build on Cloudflare

Two months ago we launched Cloudflare Images for everyone and we are amazed about the adoption and the feedback we received. Today we are announcing AVIF and Blur support for Cloudflare Images and give you a preview of the upcoming functionality.

Jacob operates TriTails Premium Beef, an online store for meat, a very perishable good. So he has a unique set of challenges with shipping. As a developer, he turned to Airtable and Cloudflare Workers to automate large parts of the process to be able to deal with their rapid growth.

Cloudflare Pages with Functions is now in open beta!

Due to the nature of CodePen — namely, hosting code and an incredibly popular embedding feature, allowing developers to share their CodePen “pens” around the world — any sort of optimization can have a massive impact on CodePen’s business.

Full-stack support for Cloudflare Pages is now in open beta, and you can test it today with this example image-sharing project that integrates with KV, Durable Objects, Cloudflare Images and Cloudflare Access.

Cloudflare Pages partners up with some of the biggest headless CMSs

Cloudflare Pages partners up with GitLab for full git integration.

We're excited to announce the second-generation of our developer tooling for Cloudflare Workers. It’s a new developer experience that’s out-of-the-box, lightning fast, and can even run Workers on a local machine. (Yes!)

Every time the Workers runtime code is built, a script runs over the public APIs and generates the Rust and TypeScript types as well as a JSON file containing an intermediate representation of the static types. The types are sent to the appropriate repositories and the JSON file is uploaded as well.

Now you can use JavaScript modules, also known as ECMAScript or “ES” modules, on Cloudflare Workers. This replaces the old “addEventListener” syntax with a new “import” and “export” semantics that makes it really easy to write reusable, modular code.

Nodecraft allows gamers to host dedicated servers for their favorite games. James Ross is the Chief Technology Officer for Nodecraft and has advocated for Cloudflare — particularly Cloudflare Workers — within the company.

We’re excited to announce Services, the new way to build composable, distributed applications on Cloudflare Workers. Learn how Services can replace the traditional “microservice architecture” with an alternative, zero-cost abstraction model.

Customers can connect to a Postgres or MySQL database directly from their Workers using a Cloudflare Tunnel today. In the future, you can use Database Connectors to achieve this natively using a standardized Socket API.

Today, we’re announcing that Durable Objects are generally available and production-ready for you to use!

The ability to make TCP and QUIC client connections from within Workers and Durable Objects, as well as the ability to connect to Workers over TCP and QUIC without using HTTP, will be coming to Cloudflare Workers. Here’s a peek at what we’re working on.

With built-in global deployments, insane scalability and the flexibility of JavaScript, more and more applications are choosing to build on our global platform.

Guido won the innovative category in one of the biggest Game Jams with a combination of Pages, Durable Objects, modern browser APIs, and a hefty amount of ingenuity.
EG
Erwin, Guido Zuidhof·November 15, 2021Frontend 
This week, as we do in our Innovation Weeks, we’ll make a series of announcements to help paint a vision for how we see the future of compute, and giving our developers the tools they need to build their next application on our network.
RJ
Rita, John Graham Cumming·November 14, 2021Networking 
Earlier this week, Cloudflare automatically detected and mitigated a DDoS attack that peaked just below 2 Tbps — the largest we’ve seen to date.

New to Cloudflare and don’t know where to begin? Here are five things you can do to get started with Cloudflare right now...

Over the past months, we’ve been tracking and analyzing the activity of the Meris botnet.

I am excited to announce that I have joined Cloudflare as the Head of Southeast Asia and Korea (SEAK) region to help build a better Internet and to expand Cloudflare’s growing customer, partner and local teams across all the countries in SEAK.

How much room does TLS have for the big post-quantum signatures? We had a look: it’s tight.

September is the “get back to school” month for many. Looking at our data there’s a global trend: mobile traffic lost importance (compared with desktop traffic) in September 2021 compared to August.
JT
Joao Tome, Sabina·November 5, 2021Languages 
In Q3, 2021 we saw and mitigated record-setting HTTP DDoS attacks, terabit-strong network layer attacks, one of the largest botnets ever deployed (Meris), and more recently, ransom attacks on Voice-over-IP (VoIP) service providers.

It’s not every day that you get to debug what may well be a packet of death. It was certainly the first time for me. What do I mean by “a packet of death”? A software bug where the network stack crashes in reaction to a single received network packet, taking down the whole operating system with it.

Cloudflare has a broad range of products -- ranging from security, to performance and serverless compute. These products are built by multiple teams in close collaboration and delivering those products can be a complex task. So ever wonder how we do so consistently and safely at scale?

Forrester’s New Wave for Edge Development Platforms has just been announced. We’re thrilled that they have named Cloudflare a leader.

We're excited to announce that Pages now natively supports custom headers on your projects! Simply create a _headers file in the build directory of your project and within it, define the rules you want to apply.

Today, October 25, following political turmoil, Sudan woke up without Internet access.

See how we’re using Cloudflare Tunnel to share our technical writing with internal stakeholders for a faster, seamless feedback process.

We are very excited to announce that Cloudflare for SaaS is generally available, so that every customer, big and small, can use Cloudflare for SaaS to continue scaling and building their SaaS business.

Understand how Cloudflare product’s interact via the new dashboard addition ‘Traffic Sequence’.

It is now possible to connect a Cloudflare Tunnel to the Cloudflare network with QUIC. While doing this, we ran into an interesting connectivity problem unique to UDP.

Over the last few years, Zero Trust, a term coined by Forrester, picked up a lot of steam. Zero Trust, in its core, is a network architecture and security framework focusing on not having a distinction between external and internal access environments, and never trusting users/roles.

On the Workers team, we have a policy: A change to the Workers Runtime must never break an application that is live in production.

Crawler Hints now supports IndexNow, a new protocol that allows websites to notify search engines whenever content on their website content is created, updated, or deleted.

Starting today, users who deploy and manage Cloudflare Tunnel at scale now have easier visibility into their Tunnel’s respective status, routes, uptime, connectors, cloudflared version, and much more through our new UI in the Cloudflare for Teams Dashboard.

We aim to continue expanding our ecosystem of programs and partners to make it seamless for our customers to use Cloudflare.

This upcoming summer, we expect to have the largest intern class ever at Cloudflare.

In this article we describe an alternative approach to active measurements, which accurately predicts network latencies using only passively collected data.

Diagnosing scaling issues in a service associated with TLS termination through a deep dive into some of the incidents it caused.

We’ve devised novel methods to detect multi-user IP addresses, and today we’re excited to announce their integration into our global threat intelligence products. These will improve the quality of our detection techniques and reduce false positives for our customers, and the clients that visit them.

We've been studying password problems, including malicious logins using compromised credentials. Here's what we learned and here's where we think we can go from here with safer password systems.

Cloudflare helps build a better Internet through collaboration on open and interoperable standards. This post will describe how Cloudflare contributes to the standardization process to enable incremental innovation and drive long-term architectural change.
JH
Jonathan Hoyland, Christopher·October 13, 2021Engineering 
Our Go cryptographic library CIRCL announces support for pairing-based cryptography.

Learn more about Exported Authenticators, a new extension to TLS, currently going through the IETF standardisation process.
JH
Jonathan Hoyland·October 13, 2021Security 
Real world experiments for evaluating connection coalescing effects.

Introducing customized recommendations to improve the security of your website.
ST
Suleman, Talha·October 12, 2021Security 
In this post, we’ll dig into ECH details and describe what this protocol does to move the needle to help build a better Internet.
CC
Christopher, Christopher Patton·October 12, 2021Security 
Cloudflare worked with TU Graz to study the impact of Spectre on Cloudflare Workers and to develop new defenses against it. Today we're publishing a paper about our research.

Announcing a new landing page where you can learn more about our research and additional resources.

Over the summer of 2020 I interned at Cloudflare Research. This invaluable experience contributed to Cloudflare’s support of ODoH protocol, and I was awarded the best student paper award at PETS 2021.