How to execute an object file: Part 1
Ever wondered if it is possible to execute an object file without linking? Or use any object file as a library? Follow along to learn how to decompose an object file and import code from it along the way.
The Teams Dashboard: Behind the Scenes
When we launched Cloudflare for Teams almost ten years later, the vision was very much the same — build a secure and powerful Zero Trust solution that is ridiculously easy to use.
Creating serendipity with Python
We've been experimenting with breaking up employees into random groups (of size 4) and setting up video hangouts between them. We're doing this to replace the serendipitous meetings that sometimes occur around coffee machines, in lunch lines or while waiting for the printer.
Through the eyes of a Cloudflare Technical Support Engineer
Justina Wong, Technical Support Team Lead in Lisbon, talks about what it’s like working at Cloudflare, and everything you need to know if you want to join us.
Using HPKE to Encrypt Request Payloads
Allowing users to securely log parts of the request that match firewall rules while making it impossible for anyone else to decrypt.
Introducing: Smarter Tiered Cache Topology Generation
Announcing a fundamental improvement to Argo Tiered Cache we’re calling Smart Tiered Cache Topology. When enabled, Argo Tiered Cache will now dynamically select the single best upper tier for each of your website’s origins while providing tiered cache analytics.
2020 U.S. Election: Cybersecurity Analysis
As we protect many entities in the election space, we have the ability to identify, learn and analyze attack trends targeted at these sites that provide authoritative election information.
Congratulations to Cloudflare’s 2020 Partner Award Winners
We are privileged to share Cloudflare’s inaugural set of Partner Awards. These Awards recognize our partner companies and representatives worldwide who stood out this past year for their investments in acquiring technical expertise in our offerings
Who won Super Bowl LV? A look at Internet traffic during the game
The obvious answer is the Tampa Bay Buccaneers but the less obvious answer comes from asking “which Super Bowl advertiser got the biggest Internet bump?”. This blog aims to answer that question.
The effect of switching to TCMalloc on RocksDB memory use
Memory allocator is an important part of the system, so choosing the right allocator for a workload can give huge benefits. Here is a story of how we decreased service memory usage by almost three times.
Cloudflare Named a ‘Best Place to Work for LGBTQ Equality’
Cloudflare receives a perfect score of 100 on the Human Rights Campaign’s 2021 Corporate Equality Index.
Data Privacy Day 2021 - Looking ahead at the always on, always secure, always private Internet
2020 was a big year for data protection, so what does 2021 have in store? On Data Privacy Day, we talk about the role data localization and encryption technologies play in data protection.
Automating data center expansions with Airflow
How we automated data center expansions and cut by 90% the amount of time our team spent on tedious operational work.
Count yourself in for a vaccine phish: new phishing campaign exploits concern over COVID-19 vaccine availability
Area 1 has uncovered a coronavirus vaccine-themed campaign spoofing the CDC. The attack, which originally bypassed Office 365’s email security, uses a number of techniques to bypass normal anti-spoofing and email authentication methods.
How We Ran a Successful Remote Internship Program in 2020
Although tumultuous and unexpected, 2020 did not come without its silver linings, one being Cloudflare’s remote summer internship program.
Introducing Project Fair Shot: Ensuring COVID-19 Vaccine Registration Sites Can Keep Up With Demand
Project Fair Shot provides Cloudflare's new Waiting Room service for free for any government, municipality, hospital, pharmacy, or other organization responsible for distributing COVID-19 vaccines.
Cloudflare Waiting Room
Today, we are excited to announce Cloudflare Waiting Room! It will be first available to select customers through a new program called Project Fair Shot, with general availability in our Business and Enterprise plans in the near future.
Network-layer DDoS attack trends for Q4 2020
DDoS attack trends in the final quarter of 2020 defied norms in many ways. For the first time in 2020, Cloudflare observed an increase in the number of large DDoS attacks. Specifically, the number of attacks over 500Mbps and 50K pps saw a massive uptick.
Uganda's January 13, 2021 Internet Shut Down
Two days ago, through its communications regulator, Uganda's government ordered the "Suspension Of The Operation Of Internet Gateways" hours before the country's general election. This action was confirmed by several users and journalists who got access to the letter sent to Internet providers.
KEMTLS: Post-quantum TLS without signatures
The TLS 1.3 protocol has been around for quite some time, but it will be broken once quantum computers arrive. What can we do? In this blog post, we will examine a technique for achieving full post-quantum security for TLS 1.3 in the face of quantum computers: KEMTLS.
Holistic web protection: industry recognition for a prolific 2020
Today we’re excited to announce that Frost & Sullivan has named Cloudflare the Innovation Leader in their Frost Radar™: Global Holistic Web Protection Market Report.
Soar: Simulation for Observability, reliAbility, and secuRity
In this article, we will discuss one of the techniques we use to fight such software complexity: simulations. Simulations are basically system tests that run with synthesized customer traffic and applications.
A Name Resolver for the Distributed Web
We are proud to announce a new resolver for the Distributed Web, where IPFS content indexed by the Ethereum Name Service (ENS) can be accessed.
Untangling Compliance: Working Toward a Global Framework
As part of Cloudflare’s recent Privacy Week we hosted a series of fireside chats on security, privacy, and compliance. Many of these conversations touched on the intricate legal debate being held in Europe around data sovereignty. Here are some of the highlights.
Meet The Workers Team Over Discord
The Cloudflare Workers team is excited to announce the opening of our Discord Channel!
Ransom DDoS attacks target a Fortune Global 500 company
In late 2020, a major Fortune Global 500 company was targeted by a Ransom DDoS (RDDoS) attack by a group claiming to be the Lazarus Group. Cloudflare quickly onboarded them to the Magic Transit service and protected them against the lingering threat.
Internet traffic disruption caused by the Christmas Day bombing in Nashville
On Christmas Day 2020, an apparent suicide bomb exploded in Nashville, TN. The explosion happened outside an AT&T network building on Second Avenue in Nashville at 1230 UTC.
Using One Cron Parser Everywhere With Rust and Saffron
Cron parsers are everywhere, each supporting their own extensions on the cron string format, which made consistency between parts of Cron Triggers difficult to achieve. Today we’re showing how we easily solved this problem with Rust without needing to write the same code twice.
Holiday Season Update from Lisbon
Cloudflare Lisbon has come a long way. We now have 74 incredibly talented people working or joining in areas such as Engineering, Security, Infrastructure, Customer Support, People, Places, Product Management, Emerging Technologies or Accounting, and growing fast.
Integrating Cloudflare Gateway and Access
We’re excited to announce that you can now set up your Access policies to require that all user traffic to your application is filtered by Cloudflare Gateway. This ensures that all of the traffic to your self-hosted and SaaS applications is secured and centrally logged.
Beat - An Acoustics Inspired DDoS Attack
On the week of Black Friday, Cloudflare automatically detected and mitigated “Beat” - an acoustics inspired DDoS attacks that targeted a Magic Transit customer.
Cloudflare Acquires Linc
Today, we’re excited to announce the acquisition of Linc, an automation platform to help front-end developers collaborate and build powerful applications.
Configure identity-based policies in Cloudflare Gateway
You can now build secure web gateway rules based on user and group identity.
Computing Euclidean distance on 144 dimensions
Last year we deployed a CSAM image scanning tool. This is so cool! Image processing is always hard, and deploying a real image identification system at a Cloudflare scale is no small achievement! But we hit a problem - the matching algorithm was too slow for our needs.
A quirk in the SUNBURST DGA algorithm
On Wednesday, December 16, the RedDrip Team from QiAnXin Technology released their discoveries (tweet, github) regarding the random subdomains associated with the SUNBURST malware which was present in the SolarWinds Orion compromise. I
Introducing Cloudflare Pages: the best way to build JAMstack websites
Across multiple cultures around the world, this time of year is a time of celebration and sharing of gifts with the people we care the most about.
Trend data on the SolarWinds Orion compromise
Analyzing SUNBURST malware activity seen on Cloudflare’s public DNS resolver.
Improving Cloudflare’s products and services, one feature request at a time
Monday Mornings with Customer Success: A monthly series brought to you by our Customer Success Team. This month's post is all about Cloudflare’s feature request process, and how we turn customer feedback into product improvements.
Supporting Jurisdictional Restrictions for Durable Objects
We’re launching Jurisdictional Restrictions for Durable Objects, making it easy for developers to build serverless, stateful applications that comply with data localization obligations.
How to Build a Global Network that Complies with Local Law
Running a global network that complies with different privacy laws around the world requires coming back to the values that we have championed since our founding.
Encrypting your WAF Payloads with Hybrid Public Key Encryption (HPKE)
Allowing logging for payloads that trigger the Web Application Firewall has always led to end-user privacy concerns. We built encrypted matched payload logging to solve this!
Phishpoint back in full swing: an infamous Microsoft SharePoint spoof resumes with new tactics
Our researchers detected an updated wave of Microsoft SharePoint phish that are leveraging new COVID-19 restrictions to steal victims’ login information.
Securing the post-quantum world
As quantum computing matures, R&D efforts in cryptography are keeping pace. We’re working with academia and industry peers to create new cryptography standards resilient to quantum computer attacks.
Cloudflare Certifications
We think trust is fundamental to building a better Internet. Cloudflare adheres to industry-standard security compliance certifications and regulations to help our customers earn their users’ trust.
Announcing Workplace Records for Cloudflare for Teams
Workplace Records uses Access and Gateway logs to provide the state and country from which employees are working. Workplace Records can be used to help finance, legal, and HR departments determine where payroll taxes are due and provide a record to defend those decisions.
Deprecating the __cfduid cookie
Cloudflare is deprecating the __cfduid cookie. While we have never tracked end-users across sites or sell their personal data, we don’t want any customer to think they need a cookie banner because of what we do.
Cloudflare’s privacy-first Web Analytics is now available for everyone
Anyone can now sign up to use Cloudflare’s new privacy-first Web Analytics -- even without changing your DNS settings.
Good-bye ESNI, hello ECH!
A deep dive into the Encrypted Client Hello, a standard that encrypts privacy-sensitive parameters sent by the client, as part of the TLS handshake.
OPAQUE & PAKE Protocols
OPAQUE is a PAKE protocol that allows for password authentication without revealing the actual password to a server. Learn more about the OPAQUE protocol.
Improving DNS Privacy with Oblivious DoH in 1.1.1.1
Oblivious DoH (ODoH) makes secure DNS over HTTPS (DoH) queries into private queries which prevent the leakage of client IP addresses to resolvers. The new proposed ODoH standard addresses this problem and today we are enabling users to use this protocol with 1.1.1.1
Helping build the next generation of privacy-preserving protocols
Today, we’re making several announcements around improving Internet protocols with respect to something important to our customers and Internet users worldwide: privacy.
Introducing the Cloudflare Data Localization Suite
The Data Localization Suite helps businesses get the performance and security benefits of Cloudflare’s global network while making it easy to set rules and controls at the edge about where their data is stored and protected.
Welcome to Privacy & Compliance Week: Reflecting Values at Cloudflare’s Core
Over the course of the week, we'll be announcing ways that our customers can use our service in order to ensure they are in compliance with an increasingly complicated set of rules and laws around the world.
An introduction to three-phase power and PDUs
This blog is a quick Electrical Engineering 101 session going over specifically how 3-phase PDUs work, along with some good practices on how we use them
Diversity and The Digital Divide: Thoughts From Tech Leaders
Leaders from across the tech industry and beyond recently joined us for Cloudflare’s Birthday Week, helping us celebrate Cloudflare’s 10th birthday. Many of them touched on the importance of diversity and making the Internet accessible to everyone.
Improving the Resiliency of Our Infrastructure DNS Zone
We've improved the resiliency and management of our infrastructure DNS zone. In this post, we guide you through some of the "whats", "whys" and "hows" we encountered along the way.
A Thanksgiving 2020 Reading List
If you want to relax in an active and learning way this Thanksgiving weekend, here are some of the topics we’ve covered on the Cloudflare blog this past week that you may find interesting.
A Byzantine failure in the real world
At Cloudflare, we are always on the lookout for Single Points of Failure. In this post, we explore the role a failure mode known as a Byzantine fault played in a a real-world incident.
ASICs at the Edge
At Cloudflare, we pride ourselves in our global network that spans more than 200 cities in over 100 countries. To accelerate all that traffic through our network, there are multiple technologies at play. So let’s have a look at one of the cornerstones that makes all of this work.
Building Black Friday e-commerce experiences with JAMstack and Cloudflare Workers
Cloudflare Workers continues to excel as a JAMstack deployment platform, and be used to power e-commerce experiences, integrating with familiar tools like Stripe, Nuxt.js, and Sanity.io.
