Unimog - Cloudflare’s edge load balancer
Unimog is the Layer 4 Load Balancer for Cloudflare’s edge data centers. This post explains the problems it solves and how it works.
Latest SBA phishing attempt: stealthy social engineering phish using newly registered domains attempts to gain bank details
Area 1 blocks social engineering, COVID-19 phishing emails impersonating Small Business Administration, using Newly Registered Domains, PDF attachments.
Rendering React on the Edge with Flareact and Cloudflare Workers
Page speed is critical. You need to get content to your audience as quickly as possible on every device. You also need to render ads in a speedy way to maintain a good user experience and make money to support your journalism.
Two clicks to add region-based Zero Trust compliance
Starting today, you can make geography-based compliance easy again in Cloudflare Access with just two clicks. You can now build rules that require employees to connect from certain countries. You can also add rules that block team members from connecting from other countries.
The Serverlist: The Edge on Localhost, Micro API in Firebase and Workers, and more!
Check out our nineteenth edition of The Serverlist below. Get the latest scoop on the serverless space, get your hands dirty with new developer tutorials, engage in conversations with other serverless developers, and find upcoming meetups and conferences to attend.
August 30th 2020: Analysis of CenturyLink/Level(3) outage
Today CenturyLink/Level(3), a major ISP and Internet bandwidth provider, experienced a significant outage that impacted some of Cloudflare’s customers as well as a significant number of other services and providers across the Internet.
Asynchronous HTMLRewriter for Cloudflare Workers
HTMLRewriter for Cloudflare Workers now supports asynchronous handlers, allowing developers to prefetch assets or user-specific content from a remote service.
How Argo Tunnel engineering uses Argo Tunnel
Argo Tunnel provides remote access to development environments by creating secure outbound-only connections to Cloudflare’s edge network from a resource exposing it to the Internet. That model helps protect servers and resources from being vulnerable to attack by an exposed IP address.
“Face mask manufacturer” supplies Agent Tesla Malware: campaign employs Covid-19 lures and sophisticated evasion techniques
Covid-19 phishing attack exploits need for face masks, thermometers to launch Agent Tesla malware (advanced Remote Access Trojan); bypasses gateways, DMARC.
Cloudflare and Human Rights: Joining the Global Network Initiative (GNI)
We are excited to announce that we have joined the Global Network Initiative (GNI), one of the world's leading human rights organizations in the information and communications Technology (ICT) sector,
Announcing wrangler dev — the Edge on localhost
A few weeks ago we announced a release candidate for wrangler dev — today, we're excited to take wrangler dev, the world’s first edge-based development environment, to GA with the release of wrangler 1.11.
Improving the Wrangler Startup Experience
You can now write any behaviour on requests heading to your site or even run fully fledged applications directly on the edge. Wrangler is the open-source CLI tool used to manage your Workers and has a big focus on enabling a smooth developer experience.
How Cloudflare uses Cloudflare Spectrum: A look into an intern’s project at Cloudflare
As part of my onboarding as an intern on the Spectrum (a layer 4 reverse proxy) team, I learned that many internal services dogfood Spectrum, as they are exposed to the Internet and benefit from layer 4 DDoS protection.
Orange Clouding with Secondary DNS
Secondary DNS Override is a great option for any users that want to take advantage of the Cloudflare network, without transferring all of their zones to Cloudflare DNS as a primary provider.
Require hard key auth with Cloudflare Access
Using Cloudflare Access, we can now restrict the ability to reach our admin panel only to team members who authenticate with a hard key. Starting today, we’re making that feature available to all teams.
Introducing Deploy Buttons
Deploy Buttons help you deploy a project to the Workers Platform without even needing to set up a local development environment. Now, it’s as easy as clicking a Deploy Button and three short steps to deploy using our new web-based deploy tool.
New and improved Workers Docs
Following user feedback about Workers Docs, we reorganized and reformatted all of our content. The documentation is now intuitive to navigate and the content is now easy and enjoyable to read.
July bonus Microsoft spear phishing
The creators of two Microsoft phishing campaigns, that Area 1 has dubbed “Summer Bonus”, are attempting to lure unsuspecting employees into divulging their Microsoft credentials.
Election Cybersecurity: Protecting the 2020 U.S. Elections.
At Cloudflare, we believe that expanding access to tools that election officials and political candidates need to combat a range of online threats both serves our mission to help build a better Internet and strengthens our democracy.
Why I joined Cloudflare
Customer Service. Business. Growth. While these three make up a large portion of what keeps most enterprise companies operating, they are just the beginning at Cloudflare. I am excited to share that I have joined Cloudflare as its Chief Customer Officer.
Protecting Remote Desktops at Scale with Cloudflare Access
Today we are announcing Argo Tunnel RDP Bastion mode, a simpler way to protect RDP connections at scale. By functioning as a jump-host, cloudflared can reside on a single node in your network and proxy requests to any internal server, eliminating deployment headaches.
Network-layer DDoS attack trends for Q2 2020
This quarter, we saw an increasing number of large scale attacks; both in terms of packet rate and bit rate. In fact, 88% of all DDoS attacks in 2020 that peaked above 100 Gbps were launched after shelter-in-place went into effect in March.
Introducing Cloudflare Network Interconnect
We’re excited to announce Cloudflare Network Interconnect (CNI). CNI allows customers to connect branch and HQ locations with Cloudflare wherever they are.
Cloudflare Network Interconnection partnerships launch
Today we’re excited to announce Cloudflare’s Network Interconnection Partner Program, in support of our new CNI product. As ever more enterprises turn to Cloudflare to secure and accelerate their branch and core networks, the ability to connect privately and securely becomes increasingly important.
My living room intern experience at Cloudflare
For the past twelve weeks, I’ve had the pleasure of working as a Legal Intern at Cloudflare. This blogpost goes over a few key things that set this internship apart from even those in which I’ve been able to connect with people in-person.
Commit to Diversity, Equity and Inclusion, Every Day
By way of this blog post, Hady Mendez shares her thoughts about where she thinks we go from here and how she believes we can truly embody Diversity Equity and Inclusion (DEI) in our workplace.
Making magic: Reimagining Developer Experience for the World of Serverless
Today I’m going to talk about TTFD, or time to first dopamine, and announce a huge improvement to the Workers development experience — wrangler dev.
The Serverlist: Workers Unbound, 0ms Cold Start Time, and more!
Check out our eighteenth edition of The Serverlist below. Get the latest scoop on the serverless space, get your hands dirty with new developer tutorials, engage in conversations with other serverless developers, and find upcoming meetups and conferences to attend.
Bringing Your Own IPs to Cloudflare (BYOIP)
Today we’re thrilled to announce general availability of Bring Your Own IP (BYOIP) across our Layer 7 products as well as Spectrum and Magic Transit services.
Eliminating cold starts with Cloudflare Workers
A “cold start” is the time it takes to load and execute a new copy of a serverless function for the first time. It’s a problem that’s both complicated to solve and costly to fix.
Mitigating Spectre and Other Security Threats: The Cloudflare Workers Security Model
Cloudflare is a security company, and the heart of Workers is, in my view, a security project. Running code written by third parties is always a scary proposition, and the primary concern of the Workers team is to make that safe.
The Migration of Legacy Applications to Workers
As Cloudflare Workers, and other Serverless platforms, continue to drive down costs while making it easier for developers to stand up globally scaled applications, the migration of legacy applications is becoming increasingly common.
Cloudflare Workers Announces Broad Language Support
Today, we’re excited to announce support for Python, Scala, Kotlin, Reason and Dart. You can build applications on Cloudflare Workers using your favorite language starting today.
Introducing Workers Unbound
Today, we are excited to announce the next phase of this with the launch of our new platform, Workers Unbound, without restrictive CPU limits in a private beta.
The Edge Computing Opportunity: It’s Not What You Think
Cloudflare Workers® is one of the largest, most widely used edge computing platforms. We announced Cloudflare Workers nearly three years ago and it's been generally available for the last two years.
New Area 1 security study shows that U.S. State & local election administrators remain vulnerable to phish
With only 100 days until Election Day, Area 1 Security’s new “Phishing Election Administrators” report assesses the depth of current email security controls used by 10,000 U.S. state and local election administrators.
Reflecting on my first year at Cloudflare as a Field Marketer in APAC
I was inspired to write about my first year in Cloudflare, because John, our CTO, encouraged more women to write for our Cloudflare blog after reviewing our blogging statistics and found out that more men than women blog for Cloudflare.
Diversity Welcome - A Latinx journey into Cloudflare
Cloudflare values diversity in our workforce and we are genuinely interested in recruiting as well as retaining under-represented groups and creating a collective learning environment for everyone.
Internationalizing the Cloudflare Dashboard
Cloudflare’s dashboard now supports four new language: Spanish (with country-specific locales: Chile, Ecuador, Mexico, Peru, and Spain), Brazilian Portuguese, Korean, and Traditional Chinese.
Introducing IP Lists
IP Lists can now be stored with metadata at the Cloudflare edge, replicated within seconds to our data centers in 200+ cities, and used as part of our powerful, expressive Firewall Rules engine to take action on incoming requests.
Why I’m Helping Cloudflare Grow in Japan
I’m excited to say that I’ve recently joined the Cloudflare team as Head of Japan. Cloudflare has had a presence in Japan for a while now, not only with its network spanning the country, but also with many Japanese customers and partners which I’m now looking forward to growing with.
Don’t trust that tweet…or that email from "Bill Gates"
On July 16th, 2020, an email appearing to be from the Bill & Melinda Gates Foundation was sent to numerous recipients, seeking donations for the Foundation in Bitcoin.
Cloudflare outage on July 17, 2020
Today a configuration error in our backbone network caused an outage for Internet properties and Cloudflare services that lasted 27 minutes. We saw traffic drop by about 50% across our network.
Serverless Rendering with Cloudflare Workers
Learning how to do server-side rendering at the network edge using Workers Sites, Wrangler, HTMLRewriter, and tools from the broader Workers platform.
Cloudflare's first year in Lisbon
We landed in Lisbon with a small team of transplants from other Cloudflare offices. We’ve almost quadrupled in a year and we intend to keep growing to around 80 by the end of 2020.
Cloudflare Network expands to more than 100 Countries
We have expanded our global network to 206 cities across more than 100 countries. This is in addition to completing 40+ datacenter expansion projects and adding over 1Tbps of bandwidth capacity to our global backbone so-far in 2020.
flowtrackd: DDoS Protection with Unidirectional TCP Flow Tracking
flowtrackd is a software-defined DDoS protection system that significantly improves our ability to automatically detect and mitigate even the most complex TCP-based DDoS attacks. If you are a Magic Transit customer, this feature will be enabled by default at no additional cost on July 29, 2020.
Mitigating a 754 Million PPS DDoS Attack Automatically
On June 20, Cloudflare automatically mitigated a highly volumetric DDoS attack that peaked above 754 million packets per second. The attack was part of an organized four day campaign starting on June 18 and ending on June 21.
Sandboxing in Linux with zero lines of code
In this post we will review Linux seccomp and learn how to sandbox any (even a proprietary) application without writing a single line of code.
Building Cloudflare TV from scratch
Cloudflare TV is a 24x7 TV channel that takes you behind-the-scenes and let’s you hear directly from the builders working on your favorite Cloudflare products. This blog post covers the story of why we decided to build Cloudflare TV in-house and some of the technologies that make it possible.
CVE-2020-5902: Helping to protect against the F5 TMUI RCE vulnerability
Cloudflare has deployed a new managed rule protecting customers against a remote code execution vulnerability that has been found in F5 BIG-IP’s web-based Traffic Management User Interface (TMUI).
Making the WAF 40% faster
As with all Cloudflare security products, the WAF is designed to not sacrifice performance for security, but there is always room for improvement. This blog post provides a brief overview of the latest performance improvements that were rolled out to our customers.
How to test HTTP/3 and QUIC with Firefox Nightly
Now that Firefox Nightly supports HTTP/3 we thought we'd share some instructions to help you enable and test it yourselves.
The Serverlist: Workers KV Updates, Serverless Supercomputers, and more!
Check out our seventeenth edition of The Serverlist below. Get the latest scoop on the serverless space, get your hands dirty with new developer tutorials, engage in conversations with other serverless developers, and find upcoming meetups and conferences to attend.
Catching up with Workers KV
Today, we’d like to share with you some of the stuff that has recently shipped in Workers KV: a new feature and an internal change that should significantly improve latency in some cases. Let’s dig in!
Introducing Regional Services
Cloudflare launches Regional Services, giving customers control over where their data is processed.
Lessons from a 2020 intern assignment
In this blog post, I want to explain the details of the full-stack take home exercise that we sent out to our 2020 internship applicants.
Cloudflare and Rackspace Technology Expand Partnership with Managed Services
Last year, Cloudflare announced the planned expansion of our partner program to help managed and professional service partners efficiently engage with Cloudflare and join us in our mission to help build a better Internet.
Why is there a "V" in SIGSEGV Segmentation Fault?
My program received a SIGSEGV signal and crashed with "Segmentation Fault" message. Where does the "V" come from? Did I read it wrong? Was there a "Segmentation *V*ault?"? Or did Linux authors make a mistake? Shouldn't the signal be named SIGSEGF?
Virtual Interning Offers Unique Challenges and Opportunities
The working world has drastically changed in the past few months. Navigating this new reality as an intern can bring some unique challenges to light.
