A Zero Trust terminal in your web browser
Starting today, your team can use that same platform to seamlessly connect to non-HTTP resources from inside of a browser with the same level of Zero Trust control available in web applications.
Introducing WebSockets Support in Cloudflare Workers
WebSockets are a powerful new addition to the Workers platform that unlocks real-time use cases in your application.
Improve your page experience with AMP and Cloudflare Workers Unbound
Google’s new page experience measurements are going to be included in their search ranking in May 2021. Learn more about how to improve your page experience with AMP and Cloudflare Workers.
Bringing AI to the edge with NVIDIA GPUs
To help anyone build AI-based applications Cloudflare is extending the Workers platform to include support for NVIDIA GPUs and TensorFlow. Soon you’ll be able to build AI-based applications that run across the Cloudflare network using pre-built or custom models for inference.
Location-based personalization at the edge with Cloudflare Workers
Geolocation data access is now available and free for all developers on our Workers platform, including users on the free plan!
Expanding the Cloudflare Workers Observability Ecosystem
Cloudflare adds Data Dog, Honeycomb, New Relic, Sentry, Splunk, and Sumologic as observability partners to the Cloudflare Workers Ecosystem
Developer Challenges
Developer week is here! Throughout the week we are running a series of Developer Challenges that give you the perfect excuse to play with our new features. See how many of the challenges you can get through.
Cloudflare Pages is now Generally Available
Today, we’re excited to announce that Cloudflare Pages is now Generally Available and ready for your production needs.
Live stream to multiple platforms with Stream Connect
We are announcing Stream Connect, a service that enables creators and creator platforms to push RTMPS feeds to the Cloudflare edge and have it restreamed to your audience on popular platforms including Twitch, Facebook, and YouTube.
Developers, Developers, Developers: Welcome to Developer Week 2021
This week, like we have done in previous Innovation Weeks (such as Security Week or Privacy Week), we will be making many (about 20) announcements of products and features to make developers’ lives easier.
Per Origin Host Header Override
Load Balancing as a concept is pretty straightforward. Take an existing infrastructure and route requests to the available origin servers so no single server is overwhelmed. Add in some health monitoring to ensure each server has a heartbeat/pulse so proactive decisions can be made.
Jonathon Dixon: Why I joined Cloudflare
I’m excited to announce that on March 1st, I joined Cloudflare as Vice President and GM, Asia Pacific (including Japan and Greater China) to help build and expand Cloudflare’s growing customer and partner base and presence in the region.
Dynamic URL Rewriting at the edge with Cloudflare
Today we are announcing the immediate availability of Transform Rules for all Cloudflare plans. Transform Rules provide Cloudflare administrators with the ability to create URL rewrite rules.
Hackers Spill the Wine: Lockdown Led to Rise in Wine Domains and Wine Scammers
Area 1 Security and Recorded Future researchers report a significant increase in the number of new wine-themed phishing domains registered starting in April 2020, and continuing through at least March 2021.
Area 1 Security Announces the Most Spoofed Brand of 2020
The COVID-19 pandemic’s influence on phishing and cyberattack lures is clear. Area 1 Security identified over 2 million phishing spoofs that exploited the World Health Organization between May 2020 and February 2021.
How to execute an object file: Part 2
Continue learning how to import and execute code from an object file. This time we will investigate ELF relocations.
The Teams Dashboard: A New Place to Call Home
Today, we’re announcing a new feature within the Teams Dash. We called it “Home”. We created Home with a simple goal in mind: design an adaptive and informative landing page where users can see a round-up of their environment.
Durable Objects, now in Open Beta
As of today, Durable Objects beta access is available to anyone with a Cloudflare Workers® subscription.
Annual March Hackness 2021: The Not-So-Sweet 16 —The Pandemic’s Phishing Influence
The COVID-19 pandemic influenced which brands attackers exploited for phishing campaigns in 2021. For example, the World Health Organization and DocuSign made Area 1 Security’s 2021 March Hackness “Not-so-Sweet 16.”
End User Security: Account Takeover Protections with Cloudflare
End-user account security is always a top priority, but a hard problem to solve. In this post, we provide a summary of all the Cloudflare features that can help.
Build Zero Trust rules with managed devices
Starting today, your team can use Cloudflare Access to build rules that only allow users to connect to applications from a device that your enterprise manages.
Inside Cloudflare: Preventing Account Takeovers
Throughout the day, Cloudflare has published blog posts on products created to secure our customers from credential stuffing bots, detect users with compromised credentials, and block users from proxy services. But what do we do inside Cloudflare to prevent account takeovers on our own applications?
A new Cloudflare Web Application Firewall
Today we are announcing a new Cloudflare Web Application Firewall for all Cloudflare paid zone customers.
Keyless SSL now supports FIPS 140-2 L3 hardware security module (HSM) offerings from all major cloud providers
Private encryption keys stored in hardware security module offerings from all major cloud providers can now be used to secure HTTPS connections at Cloudflare’s global edge.
Introducing: Advanced Certificate Manager
Today, we are excited to announce that dedicated certs are getting an upgrade… and a new name… introducing Advanced Certificate Manager! Advanced Certificate Manager is a flexible and customizable way to manage your certificates on Cloudflare.
Heartbleed Revisited
TLS key compromise is a risk for all web services. Taking lessons from Heartbleed, Cloudflare offers the latest features that make key compromise less of a risk.
Introducing Super Bot Fight Mode
Beginning immediately, any Cloudflare user with a Pro or Business site can take new action against bots. We’ve added advanced features in the dashboard and some exciting updates to analytics.
Mitigating Bot Attacks against Cloudflare
The word “bots” on the Internet is a fairly loaded one. My earliest ‘bot’ experience was on IRC, where bots were quite helpful in making sure your favorite channel didn’t get taken over by malicious users and allowed for fun games of trivia.
Announcing API Abuse Detection
Today, we are announcing early access to API Abuse Detection. This technology will identify, secure, and protect API endpoints with unsupervised learning.
Page Shield: Protect User Data In-Browser
We're excited to introduce Page Shield, a client-side security product customers can use to detect attacks in end-user browsers.
Protecting Cloudflare Customers from BGP Insecurity with Route Leak Detection
Today, we're excited to announce Route Leak Detection, a new network alerting feature that tells customers when a prefix they own that is onboarded to Cloudflare is being leaked.
Using Cloudflare for Data Loss Prevention
The increased use of cloud-based SaaS providers to store and access sensitive data introduces a swath of security risks as management of these resources can be unwieldy. The risk of data loss can be managed by using Cloudflare Access, API Shield, and Browser Isolation.
Protecting your APIs from abuse and data exfiltration
API Shield is growing with new functionalities: Schema Validation generally available, Managed IP List, more controls to manage certificates, and Data Loss Prevention.
Announcing Cloudflare’s Data Loss Prevention platform
Today, we’re excited to announce that your team can use Cloudflare’s network to build Zero Trust controls over the data in your enterprise - wherever it lives and however it moves.
Browser Isolation for teams of all sizes
Protecting endpoints from browser-born zero-day attacks and malware with remote browser isolation is now easy for teams of any size.
New device security partnerships for Cloudflare One
Cloudflare launches new integrations with CrowdStrike, SentinelOne, and VMware Carbon Black. Cloudflare for Teams customers can now restrict access to their applications based on security signals from their devices.
Announcing antivirus in Cloudflare Gateway
We’re announcing support for malware detection and prevention directly from the Cloudflare edge, giving Gateway users an additional line of defense against security threats.
Anatomy of a Targeted Ransomware Attack
Imagine your most critical systems suddenly stop operating. And then someone demands a ransom to get your systems working again. Or someone launches a DDoS against you and demands a ransom to make it stop. That’s the world of ransomware and ransom DDoS.
Magic WAN & Magic Firewall: secure network connectivity as a service
Magic WAN provides secure, performant connectivity and routing for your entire corporate network, reducing cost and operational complexity.
Announcing Network On-ramp Partners for Cloudflare One
We know the promise of replacing MPLS links with a global, secure, performant and observable network is going to transform the corporate network and the industry itself.
Annual March Hackness: The Opener — What a Difference a Year Makes in the World of Phishing Attacks
Area 1 has been doing our own Phishing brackets over the past five years. We took a hiatus in 2020 (as did the NCAA), so today, we proudly introduce the 5th Annual March Hackness: The Phishing Tournament.
Welcome to Cloudflare Security Week 2021!
Today kicks off Cloudflare's 2021 Security Week. Like all innovation weeks at Cloudflare, we'll be announcing a dizzying number of new products, opening products that have been in beta to general availability.
Moving k8s communication to gRPC
How we use gRPC in combination with Kubernetes to improve the performance and usability of internal APIs.
Random Employee Chats at Cloudflare
We developed the Random Employee Chats application internally, with the goal of recreating the pre-pandemic informal interactions. Here's how we moved from a shared spreadsheet to Cloudflare Workers to automate the entire process.
Cloudflare and WordPress.com partner to Help Build a Better Internet
Today we’re excited to announce a number of initiatives, starting with the integration of Cloudflare’s privacy-first web analytics into WordPress.com. This integration gives WordPress.com publishers choice in how they collect usage data and derive insights about their visitors.
Third Time’s the Cache, No More
Up until now, we wouldn’t cache requests with query strings until we saw them three times. We trace that behavior back to 2010, examine why we might have needed it, and show ourselves why we don’t need it anymore.
A deep-dive into Cloudflare’s autonomous edge DDoS protection
Introducing our autonomous DDoS (Distributed Denial of Service) protection system, globally deployed to all of Cloudflare’s 200+ data centers, and is actively protecting all our customers against DDoS attacks across layers 3 to 7 (in the OSI model) without requiring any human intervention.
Sophisticated Microsoft Spoof Targets Financial Departments
A sophisticated Microsoft Office 365 credential harvesting campaign targets financial departments at companies across multiple industries, as well as newly-appointed CEOs and executive assistants.
The Teams Dashboard: The Design Story
Here is the story of how we took Cloudflare for Teams from initial concepts, to an MVP, to now a comprehensive security platform that secures networks, users, devices, and applications.
Automatic Platform Optimization post-launch report
We explored almost 200 websites with the activated Automatic Platform Optimization feature in Chrome User Experience Report data. Automatic Platform Optimization consistently demonstrated better aggregate performance among sites we analyzed in TTFB, First Paint, FCP, and LCP metrics.
Enhancing privacy-focused Web Analytics to better meet your metrics needs
Today, we’re excited to announce the release of three of the most requested features: adding multiple websites to an account, supporting Single-page Applications (SPA) as well as showing Core Web Vitals in Web Analytics.
Lessons Learned from Scaling Up Cloudflare’s Anomaly Detection Platform
Anomaly Detection uses an algorithm called Histogram-Based Outlier Scoring (HBOS) to detect anomalous traffic in a scalable way. While HBOS is less precise than algorithms like kNN when it comes to local outliers, it is able to score global outliers quickly (in linear time).
ARMs Race: Ampere Altra takes on the AWS Graviton2
A comparison between the Ampere Altra and the AWS Graviton2, the two ARM Neoverse N1-based processors.
Control web applications with two-clicks in Cloudflare Gateway
Announcing Application policies in Cloudflare Gateway. With Gateway, users instead connect to one of Cloudflare’s data centers in 200 cities around the world where our network can apply consistent security policies for all of their Internet traffic.
The benefits of serving stale DNS entries when using Consul
We use Consul for service discovery, and we’ve deployed a cluster that spans several of our data centers. We were aware from the start that the DNS query latencies were not great from certain parts of the world that were furthest away from these data centers.
Happy International Women’s Day!
Here at Cloudflare, we’re thrilled to celebrate International Women’s Day today! We have tons of events planned throughout the month of March, which is our way of honoring Women’s Empowerment Month.
Protecting against recently disclosed Microsoft Exchange Server vulnerabilities: CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065
Cloudflare has deployed managed rules protecting customers against a series of remotely exploitable vulnerabilities that were recently found in Microsoft Exchange Server.
The Teams Dashboard: Finding a Product Voice
Users love products whose voices they recognize. Here’s how we created a voice for the Teams Dashboard, and how we’re working to make our user’s experience more intentional and consistent.
Conntrack turns a blind eye to dropped SYNs
We have been dealing with conntrack, the connection tracking layer in the Linux kernel, for years. And yet, despite the collected know-how, questions about its inner workings occasionally come up. When they do, it is hard to resist the temptation to go digging for answers.
Cloudflare recognized as a 'Leader' in The Forrester Wave for DDoS Mitigation Solutions
Cloudflare is named a ‘Leader’ in Forrester Wave™ for DDoS Mitigation Solutions, Q1 2021
