
As part of Cloudflare’s effort to build collaborations with academia, we host research focused internships all year long. Interns collaborate cross-functionally in research projects and are encouraged to ship code and write a blog post and a peer-reviewed publication at the end of their internship.

What Cloudflare Research has been up to for the last two years.

We used Cloudflare Radar to find out those countries on the planet that have more (and less) mobile traffic on the Internet. Africa and the Middle East are the areas of the planet where mobile traffic dominates the Internet experience

Today, we're going to show you how the Facebook and affiliate sites downtime affected us, and what we can see in our data.

On September 29th 2021, the Apache Security team was alerted of a path traversal vulnerability being actively exploited (zero-day) against Apache HTTP Server version 2.4.49. Customers running the affected Apache version, should update to 2.5.51 as soon as possible.
MT
Michael Tremante·October 8, 2021Security 
Today, we are announcing Waiting Room’s general availability and several new features that have user experience in mind — an alternative queueing method and support for custom web/mobile applications!

Because of the sustained attacks we are observing, we are sharing details on recent attack patterns, what steps they should take before an attack, and what to do after an attack has taken place.

In Mon Cheri Bridals, LLC v. Cloudflare, Inc., the United States District Court for the Northern District of California granted Cloudflare’s motion for summary judgment and concluded that no reasonable jury could find Cloudflare liable for the alleged copyright infringement at issue.

We are excited to announce that Enterprise customers now have the ability to test custom uploaded certificates in a staging environment before pushing them to production.

Contemporary x86 processors implement some variants of Hyper-Threading and Turbo Boost. We decided to learn about the implications of these two technologies.

Starting today, you can add new policies in Cloudflare Access that grant temporary access to specific users based on approvals for a set of predefined administrators.

How do we get so much stuff out so quickly? That we are able to innovate — and innovate so quickly — is no happy accident. In fact, this capability has been very deliberately built into the DNA of Cloudflare.

A little over two weeks ago, we shared extensive benchmarking results of edge networks around the world, and made a commitment that we would improve in 10% of networks where we were not #1.

Over the past month, multiple Voice over Internet Protocol (VoIP) providers have been targeted by Distributed Denial of Service (DDoS) attacks from entities claiming to be REvil.
OA
Omer, Alex Forster·October 1, 2021Security 
In this blog we start to explain Web3 in the context of the web's evolution, and how Cloudflare might help to support it.

Cloudflare announces the Private Beta of their Web3 gateways for Ethereum and IPFS. Unlocking the Metaverse, Web3, and Decentralized Finance for every developer.

Learn how to build Web3 applications with Cloudflare’s new open-source template.

You can now use Cloudflare to do serverless end-to-end live-streaming. Stream Live offers video ingestion, encoding, recording and a player in a single product.

Today we’re excited to announce that we're making the technology we used to build Cloudflare TV available to any other business that wants to run their own 24x7 streaming network.

We’re making it easier to build and scale real-time communications applications around open technologies, starting with WebRTC Components.

Cloudflare Radar shows how Spanish media outlets had an increase in Internet traffic after the volcano eruption on the island of La Palma.

The Cloudflare IPFS module protects users from threats like phishing and ransomware.

We are extending Cloudflare’s network directly into the most populated office buildings.
JA
James Allworth, Alon·September 29, 2021Networking 
Dark mode is now available for the Cloudflare Dashboard in beta! From your user profile, you can configure the Cloudflare Dashboard in light mode, dark mode, or match it to your system settings.

Introducing Cloudflare’s S3-compatible Object Storage service, with zero egress bandwidth charges and automatic migration from S3-compatible services.

We’re excited to announce that all customers now have the ability to register new domains with Cloudflare.

In 2020, we decided to formalize our commitment to being an active partner in the global community by joining the UN Global Compact (UNGC) as a signatory.

You can now easily and quickly create email addresses for domain, and forward to them all to your preferred inbox, like Gmail or Outlook. Cloudflare Email Forwarding is completely free, and always res

Today we’re announcing a new tool to tackle email spoofing and phishing. We’ll warn users about insecure configurations and provide an easy-to-use wizard to create required DNS records.

This week we celebrate Cloudflare's birthday. We launched the company 11 years ago tomorrow: September 27, 2010. It has been our tradition, since our first birthday, to use this week to launch innovative new products that we think of as our gift back to the Internet.
MP
Matthew Prince, Michelle Zatlyn·September 26, 2021Engineering 
In this blog, we will look into what the OAuth 2.0 protocol is, and how it can help improve the authorization process in the command-line interface tool Wrangler used to manage your Cloudflare Workers.

We’re excited to announce the availability of the HTTP DDoS Managed Ruleset. This new feature allows Cloudflare customers to independently tailor their HTTP DDoS protection settings.

This is the culmination of a special project we’ve been working on for the last few months dubbed Project Myriagon, a reference to the 10,000-sided polygon of the same name.

With Cloudflare’s extensive network, consisting of 250+ cities, your Pages site is deployed directly to the edge in seconds.

To help measure performance of our customers’ Workers, we’re beginning to integrate with the Chrome DevTools protocol.

Project Turpentine is the easiest way to replicate a varnish configuration on Cloudflare. Just export your full VCL from another provider and use Turpentine to move to a TypeScript-based runtime for varnish on Cloudflare Workers.

We recently ran a measurement experiment where we used Real User Measurement (RUM) data from the standard browser API to test the performance of Cloudflare and others in real-world conditions across the globe.

Today, Cloudflare is announcing support for Early Hints. Early Hints takes advantage of “server think time” to asynchronously send instructions to the browser to begin loading resources while the origin server is compiling the full response, which can improve page load time by 30%.

Cloudflare for Teams secures your company’s users, devices, and data — without slowing you down. Your team should not need to sacrifice performance in order to be secure.

It’s important that our network continues to help bring improved performance and resiliency to the Internet. To accomplish this, we built our own backbone.

“The last 20% of the work requires 80% of the effort.” The Pareto Principle applies in many domains — nowhere more so on the Internet, however, than on the Last Mile.

Today, as part of Speed Week, we’ll break down the other side of the Magic: how using Cloudflare can automatically make your entire network faster.

Today, we are launching Cloudflare Images for all customers. Images provides a single product to store, resize and serve images. We built Cloudflare Images, so customers of all sizes can build a scalable and affordable image pipeline with a fraction of the effort.

Cloudflare Web Analytics makes essential web analytics, such as the top-performing pages on your website and top referrers, available to everyone for free, and it’s becoming more powerful than ever.

Using Rust and Cloudflare Workers helps us quickly iterate and deliver product improvements over the coming weeks and months.

Are you tired of buckets and non ending egress fees? Cloudflare Images can help you to create and maintain your entire image pipeline.

A detailed breakdown of how best to optimize images for the web, a new tool to test a webpage's image performance, and explanation of how Cloudflare Images can help to improve your website's image experience.

This is the story of how we decided to work with Google to build Signed Exchanges support at Cloudflare. But, more generally, it's also a story of how Cloudflare thinks about building disruptive new products.

Building a better Internet means helping build more reliable and efficient services that everyone can use.

Starting today, all Free, Pro, and Business plan Argo customers will see improved performance with no additional configuration or charge.

Starting today, Cloudflare customers will be able to generate Signed Exchanges (SXG) for Google Search with just one click.

In this blog post, we’ll show you how we built a new system that can give you access to your Cloudflare logs in real time, with just a single click.

Today, we’re excited to introduce Live-updating Analytics and Instant Logs. For Pro, Business, and Enterprise customers, our analytics dashboards now update in real time. In addition to this, Enterprise customers can now view their HTTP request logs instantly in the Cloudflare dashboard.

Today, Workers is 30% faster than it was three years ago at P90. And it is 210% faster than Lambda@Edge, and 298% faster than Lambda.

We’re excited to announce support for Vary, an HTTP header that ensures different content types can be served to user-agents with differing capabilities.

Today, I have three speedy infrastructure updates: we’ve passed 250 on-network cities, more than tripled our external network capacity, and increased our long-haul internal backbone network by over 800% since the start of 2020.

No one likes to wait. Internet impatience is something we all suffer from.

Continue learning how to import and execute code from an object file. In this part we will handle external library dependencies.

Introducing the Cloudflare Workers Rust SDK: write your entire Worker in Rust, no JavaScript required.

Today, we’re excited to announce that SaaS providers will now be able to give their customers visibility into what happens to their traffic when the customer onboards onto the SaaS provider, and inherently, onto the Cloudflare network.