
On August 25, 2021, Atlassian released a security advisory affecting their Confluence application. The Cloudflare WAF soon after started mitigating an increase in malicious traffic to vulnerable endpoints ensuring customers remained protected.
MT
Michael Tremante·September 8, 2021Security 
Today, we’re excited to announce all the customizations that our team has been working on for our Enterprise customers — for both Cloudflare for SaaS and SSL for SaaS.

Cloudflare Tunnel now supports a free version that includes all the latest features and does not require any onboarding to Cloudflare. With today’s change, you can begin experimenting with Tunnel in five minutes or less.

At Cloudflare we aim to introduce a new server platform to our edge network every 12 to 18 months or so, to ensure that we keep up with the latest industry technologies and developments.

Using async Rust libraries is usually easy. It's just like using normal Rust code, with a little async or .await here and there. But writing your own async libraries can be hard.

Many developers know the feeling: “It worked in the local testing suite, it worked in our staging environment, but… it’s broken in production?” Testing can reduce mistakes and debugging can help find them, but logs give us the tools to understand and improve what we are creating.

Magic Transit advertises our customer’s IP prefixes directly from our edge network, applying DDoS mitigation and firewall policies to all traffic destined for the customer’s network.

Starting today, your team can use Cloudflare’s Browser Isolation service to protect sensitive data inside the web browser. Administrators can define Zero Trust policies to control who can copy, paste, and print data in any web based application.

Today, we’re excited to announce Tenant Control in Cloudflare Gateway, a new feature that helps keep our work at work.

This was a perfect weekend project: I would set up my own pet cam, connect it to the Internet, and make it available for me to check from anywhere in the world.

Earlier this summer, Cloudflare’s autonomous edge DDoS protection systems automatically detected and mitigated a 17.2 million request-per-second (rps) DDoS attack, an attack almost three times larger than any previous one that we're aware of.

In April 2021, Cloudflare relaunched Project Jengo, Cloudflare’s prior art search contest. Here are the first round winners and an update on the case.

Starting today, Cloudflare for Teams administrators can prompt users to enter a justification for accessing an application prior to login.

With Access in front of your SaaS applications, you can build Zero Trust rules that determine who can reach your SaaS applications in the same place where your rules for self-hosted applications and network access live.

Cloudflare for Teams adds additional posture capabilities to better protect Access backed applications

With Cloudflare for Teams, Administrators can allow their users to securely access applications with Cloudflare Access and explicitly block users from visiting various applications with Cloudflare Gateway.

We’re giving away 300+ boxes of our most popular swag, while enabling collaboration with other participants through our Workers Discord channel.

If you haven’t already heard, we’re hosting the Cloudflare Summer Developer Challenge, a contest for the Cloudflare community at large. Anybody – yes, including you – can sign up for free and compete for a chance to win one of 300 available prizes.

Today, we are taking another step in helping to reduce the Internet’s reliance on CAPTCHAs to prove that you are not a robot. We are expanding the reach of our Cryptographic Attestation of Personhood experiment by adding support for a much wider range of devices.

In Cryptographic Attestation of Personhood the server sends a message to the browser that the hardware security signs, demonstrating its authenticity.

Today, we are proud to announce a new way to connect your Pages application with your headless CMSs and databases: introducing Deploy Hooks for Pages.
NC
Nevi, Christian·August 6, 2021Frontend 
Cloudflare is excited to announce our Back to School initiative that provides special K-12 Education pricing to help school districts stop cyber attacks while improving web performance.

By using PostgREST with Postgres, we can build REST API-based applications. In particular, it's an excellent fit for Cloudflare Workers, our serverless function platform. Workers is a great place to build REST APIs.

When multiple clients access the same storage concurrently, race conditions abound. Durable Objects can make it easier. We recently rolled out improvements to Durable Objects that automatically correct many common race conditions while actually making your code faster.

Cloudflare and Accenture Federal Services (AFS) have been selected to deliver a joint solution to help the United States Government defend against cybersecurity attacks.

During Impact Week, we've shared how Cloudflare is providing tools for our customers to minimize their environmental impact as well as what we, as a company, are doing to help society at large. But some critical stakeholders we haven’t talked much about yet are Cloudflare's more than 2,000 employees
MP
Matthew Prince, Michelle Zatlyn·July 30, 2021Engineering 
To help early stage startups get going, Cloudflare is giving away one year of the Startup Enterprise plan to all early stage startups in participating accelerator programs.

At Cloudflare, we place a lot of value on the importance of diversity, equity and inclusion. Diversity, equity, and inclusion lead to better outcomes through improved decision-making, more innovative teams, stronger financial returns and simply a better place to work for everyone.

Greencloud is a coalition of Cloudflare employees who are passionate about the environment. Initially founded in 2019, we’re a cross-functional, global team with a few areas of focus: Awareness, Support, and Advocacy.

Employee resource groups (ERGs) foster community and a sense of belonging, help drive organizational change, and improve the overall quality of an organization’s culture. Most importantly, they help organizations become more diverse, equitable, and inclusive.

We're excited to announce that Cloudflare is joining Pledge 1%. We're joining the more than 12,000 companies in 100 countries that are committed to making a tangible, positive impact in their communities.

Due to the growing trend of cyberattacks targeting election infrastructure, election security is not a US-specific issue. Today, we are extending our security tools to a range of election entities

Today, we are announcing Radar Alerts, a new program to help our civil society partners track and document Internet shutdowns and protect democratic elections around the world from cyberattacks.

Cloudflare recognizes privacy in personal data as a fundamental human right and has taken a number of steps, including certifying to international standards, to demonstrate our commitment to privacy.

Cloudflare Waiting Room helping organizations around the world to stifle COVID-19 and aid with easy rapid vaccinations.

Independent media and journalists are targeted both physically and online as a result of reporting critical events around the world. Learn how the Global Cyber Alliance and Project Galileo

Today, we are releasing our first human rights policy. The policy sets out our commitments and the way we implement them. Cloudflare’s mission — to help build a better Internet — reflects a long-

Crawler Hints provide high quality data to search engine crawlers on when content has been changed on sites using Cloudflare, allowing them to precisely time their crawling, avoid wasteful crawls, and generally reduce resource consumption of customer origins.

When both Last-Modified and Etag headers are absent from the origin response, Smart Edge Revalidation will use the time the object was cached on Cloudflare as the Last-Modified header value. When

By 2025 Cloudflare aims to remove all greenhouse gases emitted as the result of powering our network, and we are committed to powering our network with 100% renewable energy.
PD
Patrick Day, Michael Aylward·July 27, 2021Networking 
While we didn't set out to reduce the environmental impact of the Internet, Cloudflare has always had efficiency at its core. It comes from our ongoing fight with an old nemesis: the speed of light.

At Cloudflare, our goal is to bring sustainable computing to you without the need for any additional time, work, or complexity.

Using Arm, Cloudflare can now securely process over ten times as many Internet requests for every watt of power consumed, than we did for servers designed in 2013.

As part of Cloudflare’s Impact Week, we’re excited to announce a new tool: Your Carbon Impact Report, available today for all Cloudflare accounts, will outline the carbon savings of operating your Internet properties on Cloudflare’s network.

Cloudflare is proud to announce its collaboration with the Green Web Foundation, a not-for-profit organization with the mission of creating an Internet that one day will run on entirely renewable energy.

Cloudflare is excited to announce Project Pangea. We’re launching a program that provides secure, performant, reliable access to the Internet for community networks that support underserved communities, and we’re doing it for free because we want to help build an Internet for everyone.

If you are well-prepared to take up the challenge, you will get to experience a moment where you are stepping forward to help build a better world. I felt exactly that when I joined Cloudflare as a Systems Engineer in Austin, Texas.

This week, Cloudflare is announcing Project Pangea, with the goal of helping reduce Internet access inequality.
JG
John Graham Cumming, Nitin Rao·July 26, 2021Engineering 
I’m pleased to introduce myself and Cloudflare’s newest Employee Resource Group (ERG), Flarability. The 31st anniversary of the signing of the Americans with Disabilities Act is an ideal time to raise the subject of accessibility at Cloudflare and around the world.

We originally conceived the idea of Impact Week as a way to highlight some of the things we were doing as a company around our environmental, social, and governance (ESG) initiatives.

Recently, a RCE vulnerability in the way cdnjs’ backend is automatically keeping web resources up to date has been disclosed. Read about how Cloudflare handled the security incident and what will prevent similar exploits in the future.
GT
Ganz, Thomas Calderon·July 24, 2021Security 
Amazon’s says: “We strive to offer our customers the lowest possible prices, the best available selection, and the utmost convenience.” When it comes to egress, their prices are far from the lowest.

High egress costs from a Cloud limit customers choice in Cloud services. Cloudflare’s Bandwidth Alliance with our cloud partners provides an alternative to this lock-in. Our customers have benefitted from this both via discounted egress costs and choice of storage providers.

Cloudflare and our strategic partner in China have created a global network that offers a fast experience for visitors inside and outside of China — with DDoS mitigation, web application firewall (WAF), and other security services built in.

Today we’re excited to launch Workers usage notifications that proactively send relevant usage information directly to your inbox.

Today, we are excited to announce an expansion we’ve been working on behind the scenes for the last two years: a 25+ city partnership with one of the largest ISPs in Brazil.

The DDoS attack trends observed over Cloudflare’s network in 2021 Q2 paint a picture that reflects the overall global cyber threat landscape. Here are some highlights of DDoS attack trends observed in 2021 Q2.

Take control of your traffic by adding custom logic to your origin selection and traffic steering decisions!

In Cloudflare’s core data centers, we are using Kubernetes to run many of the diverse services that help us control Cloudflare’s edge. We are automating some aspects of node remediation to keep the Kubernetes clusters healthy.

Cloudflare has been publishing statistics about all the teams involved in EURO 2020 and traffic to betting websites, sports newspapers, streaming services and sponsors. Here’s a quick look at some specific highlights from England’s and Italy’s EURO 2020.