Kicking Off Cloudflare's Summer 2022 Internship Program
This upcoming summer, we expect to have the largest intern class ever at Cloudflare.
“Look, Ma, no probes!” — Characterizing CDNs’ latencies with passive measurement
In this article we describe an alternative approach to active measurements, which accurately predicts network latencies using only passively collected data.
Geo Key Manager: Setting up a service for scale
Diagnosing scaling issues in a service associated with TLS termination through a deep dive into some of the incidents it caused.
Multi-User IP Address Detection
We’ve devised novel methods to detect multi-user IP addresses, and today we’re excited to announce their integration into our global threat intelligence products. These will improve the quality of our detection techniques and reduce false positives for our customers, and the clients that visit them.
Research Directions in Password Security
We've been studying password problems, including malicious logins using compromised credentials. Here's what we learned and here's where we think we can go from here with safer password systems.
Cloudflare and the IETF
Cloudflare helps build a better Internet through collaboration on open and interoperable standards. This post will describe how Cloudflare contributes to the standardization process to enable incremental innovation and drive long-term architectural change.
Pairings in CIRCL
Our Go cryptographic library CIRCL announces support for pairing-based cryptography.
Exported Authenticators: The long road to RFC
Learn more about Exported Authenticators, a new extension to TLS, currently going through the IETF standardisation process.
Coalescing Connections to Improve Network Privacy and Performance
Real world experiments for evaluating connection coalescing effects.
Introducing SSL/TLS Recommender
Introducing customized recommendations to improve the security of your website.
Handshake Encryption: Endgame (an ECH update)
In this post, we’ll dig into ECH details and describe what this protocol does to move the needle to help build a better Internet.
Dynamic Process Isolation: Research by Cloudflare and TU Graz
Cloudflare worked with TU Graz to study the impact of Spectre on Cloudflare Workers and to develop new defenses against it. Today we're publishing a paper about our research.
Announcing Cloudflare Research Hub
Announcing a new landing page where you can learn more about our research and additional resources.
Internship Experience: Research Engineer
Over the summer of 2020 I interned at Cloudflare Research. This invaluable experience contributed to Cloudflare’s support of ODoH protocol, and I was awarded the best student paper award at PETS 2021.
Cloudflare invites visiting researchers
As part of Cloudflare’s effort to build collaborations with academia, we host research focused internships all year long. Interns collaborate cross-functionally in research projects and are encouraged to ship code and write a blog post and a peer-reviewed publication at the end of their internship.
Cloudflare Research: Two Years In
What Cloudflare Research has been up to for the last two years.
Where is mobile traffic the most and least popular?
We used Cloudflare Radar to find out those countries on the planet that have more (and less) mobile traffic on the Internet. Africa and the Middle East are the areas of the planet where mobile traffic dominates the Internet experience
What happened on the Internet during the Facebook outage
Today, we're going to show you how the Facebook and affiliate sites downtime affected us, and what we can see in our data.
Helping Apache Servers stay safe from zero-day path traversal attacks (CVE-2021-41773)
On September 29th 2021, the Apache Security team was alerted of a path traversal vulnerability being actively exploited (zero-day) against Apache HTTP Server version 2.4.49. Customers running the affected Apache version, should update to 2.5.51 as soon as possible.
Waiting Room: Random Queueing and Custom Web/Mobile Apps
Today, we are announcing Waiting Room’s general availability and several new features that have user experience in mind — an alternative queueing method and support for custom web/mobile applications!
Update on recent VoIP attacks: What should I do if I’m attacked?
Because of the sustained attacks we are observing, we are sharing details on recent attack patterns, what steps they should take before an attack, and what to do after an attack has taken place.
In a win for the Internet, federal court rejects copyright infringement claim against Cloudflare
In Mon Cheri Bridals, LLC v. Cloudflare, Inc., the United States District Court for the Northern District of California granted Cloudflare’s motion for summary judgment and concluded that no reasonable jury could find Cloudflare liable for the alleged copyright infringement at issue.
Staging TLS Certificates: Make every deployment a safe deployment
We are excited to announce that Enterprise customers now have the ability to test custom uploaded certificates in a staging environment before pushing them to production.
Measuring Hyper-Threading and Turbo Boost
Contemporary x86 processors implement some variants of Hyper-Threading and Turbo Boost. We decided to learn about the implications of these two technologies.
Announcing Access Temporary Authentication
Starting today, you can add new policies in Cloudflare Access that grant temporary access to specific users based on approvals for a set of predefined administrators.
The secret to Cloudflare’s pace of Innovation
How do we get so much stuff out so quickly? That we are able to innovate — and innovate so quickly — is no happy accident. In fact, this capability has been very deliberately built into the DNA of Cloudflare.
Two Weeks Later: Finding and Eliminating Long Tail Latencies
A little over two weeks ago, we shared extensive benchmarking results of edge networks around the world, and made a commitment that we would improve in 10% of networks where we were not #1.
May I ask who’s calling, please? A recent rise in VoIP DDoS attacks
Over the past month, multiple Voice over Internet Protocol (VoIP) providers have been targeted by Distributed Denial of Service (DDoS) attacks from entities claiming to be REvil.
Web3 — A vision for a decentralized web
In this blog we start to explain Web3 in the context of the web's evolution, and how Cloudflare might help to support it.
Announcing The Cloudflare Distributed Web Gateways Private Beta: Unlocking the Web3 Metaverse and Decentralized Finance for Everyone
Cloudflare announces the Private Beta of their Web3 gateways for Ethereum and IPFS. Unlocking the Metaverse, Web3, and Decentralized Finance for every developer.
Get started Building Web3 Apps with Cloudflare
Learn how to build Web3 applications with Cloudflare’s new open-source template.
Serverless Live Streaming with Cloudflare Stream
You can now use Cloudflare to do serverless end-to-end live-streaming. Stream Live offers video ingestion, encoding, recording and a player in a single product.
Announcing Cloudflare TV as a Service
Today we’re excited to announce that we're making the technology we used to build Cloudflare TV available to any other business that wants to run their own 24x7 streaming network.
Real-Time Communications at Scale
We’re making it easier to build and scale real-time communications applications around open technologies, starting with WebRTC Components.
Increased interest in Spanish media after the La Palma volcanic eruption
Cloudflare Radar shows how Spanish media outlets had an increase in Internet traffic after the volcano eruption on the island of La Palma.
How Cloudflare provides tools to help keep IPFS users safe
The Cloudflare IPFS module protects users from threats like phishing and ransomware.
Cloudflare for Offices
We are extending Cloudflare’s network directly into the most populated office buildings.
Dark Mode for the Cloudflare Dashboard
Dark mode is now available for the Cloudflare Dashboard in beta! From your user profile, you can configure the Cloudflare Dashboard in light mode, dark mode, or match it to your system settings.
Announcing Cloudflare R2 Storage: Rapid and Reliable Object Storage, minus the egress fees
Introducing Cloudflare’s S3-compatible Object Storage service, with zero egress bandwidth charges and automatic migration from S3-compatible services.
Registrar for Everyone
We’re excited to announce that all customers now have the ability to register new domains with Cloudflare.
A Better Internet with UN Global Compact
In 2020, we decided to formalize our commitment to being an active partner in the global community by joining the UN Global Compact (UNGC) as a signatory.
Easily creating and routing email addresses with Cloudflare Email Routing
You can now easily and quickly create email addresses for domain, and forward to them all to your preferred inbox, like Gmail or Outlook. Cloudflare Email Forwarding is completely free, and always res
Tackling Email Spoofing and Phishing
Today we’re announcing a new tool to tackle email spoofing and phishing. We’ll warn users about insecure configurations and provide an easy-to-use wizard to create required DNS records.
Cloudflare's 2021 Annual Founders' Letter
This week we celebrate Cloudflare's birthday. We launched the company 11 years ago tomorrow: September 27, 2010. It has been our tradition, since our first birthday, to use this week to launch innovative new products that we think of as our gift back to the Internet.
Bringing OAuth 2.0 to Wrangler
In this blog, we will look into what the OAuth 2.0 protocol is, and how it can help improve the authorization process in the command-line interface tool Wrangler used to manage your Cloudflare Workers.
How to customize your HTTP DDoS protection settings
We’re excited to announce the availability of the HTTP DDoS Managed Ruleset. This new feature allows Cloudflare customers to independently tailor their HTTP DDoS protection settings.
Project Myriagon: Cloudflare Passes 10,000 Connected Networks
This is the culmination of a special project we’ve been working on for the last few months dubbed Project Myriagon, a reference to the 10,000-sided polygon of the same name.
Cloudflare Pages is Lightning Fast
With Cloudflare’s extensive network, consisting of 250+ cities, your Pages site is deployed directly to the edge in seconds.
Profiling Your Workers with Wrangler
To help measure performance of our customers’ Workers, we’re beginning to integrate with the Chrome DevTools protocol.
Announcing Project Turpentine: an easy way to get off Varnish
Project Turpentine is the easiest way to replicate a varnish configuration on Cloudflare. Just export your full VCL from another provider and use Turpentine to move to a TypeScript-based runtime for varnish on Cloudflare Workers.
Benchmarking Edge Network Performance: Akamai, Cloudflare, Amazon CloudFront, Fastly, and Google
We recently ran a measurement experiment where we used Real User Measurement (RUM) data from the standard browser API to test the performance of Cloudflare and others in real-world conditions across the globe.
Early Hints: How Cloudflare Can Improve Website Load Times by 30%
Today, Cloudflare is announcing support for Early Hints. Early Hints takes advantage of “server think time” to asynchronously send instructions to the browser to begin loading resources while the origin server is compiling the full response, which can improve page load time by 30%.
The Zero Trust platform built for speed
Cloudflare for Teams secures your company’s users, devices, and data — without slowing you down. Your team should not need to sacrifice performance in order to be secure.
Cloudflare Backbone: A Fast Lane on the Busy Internet Highway
It’s important that our network continues to help bring improved performance and resiliency to the Internet. To accomplish this, we built our own backbone.
Unboxing the Last Mile: Introducing Last Mile Insights
“The last 20% of the work requires 80% of the effort.” The Pareto Principle applies in many domains — nowhere more so on the Internet, however, than on the Last Mile.
Magic makes your network faster
Today, as part of Speed Week, we’ll break down the other side of the Magic: how using Cloudflare can automatically make your entire network faster.
Cloudflare Images Now Available to Everyone
Today, we are launching Cloudflare Images for all customers. Images provides a single product to store, resize and serve images. We built Cloudflare Images, so customers of all sizes can build a scalable and affordable image pipeline with a fraction of the effort.
Discovering what’s slowing down your website with Web Analytics
Cloudflare Web Analytics makes essential web analytics, such as the top-performing pages on your website and top referrers, available to everyone for free, and it’s becoming more powerful than ever.
Building Cloudflare Images in Rust and Cloudflare Workers
Using Rust and Cloudflare Workers helps us quickly iterate and deliver product improvements over the coming weeks and months.
How Cloudflare Images can make your life easier
Are you tired of buckets and non ending egress fees? Cloudflare Images can help you to create and maintain your entire image pipeline.
