Introducing Cache Analytics
Cache Analytics gives you deeper exploration capabilities into Cloudflare’s content delivery services, making it easier than ever to improve the performance and economics of serving your website to the world.
Using data science and machine learning for improved customer support
In this blog post we’ll explore three tricks that can be used for data science that helped us solve real problems for our customer support group and our customers. Two for natural language processing in a customer support context and one for identifying attack Internet attack traffic.
Health Check Analytics and how you can use it
Health Check Analytics is now live and available to all Pro, Business and Enterprise customers! We are very excited to help decrease your time to resolution and ensure your application reliability is maximised.
Project Galileo’s 6th year Anniversary: The Impact of COVID-19 on the most vulnerable groups on the Internet
Six years ago, Cloudflare started Project Galileo to provide free services to vulnerable nonprofits, journalism and independent media voices online who might otherwise be in danger of being silenced by cyberattacks.
High Availability Load Balancers with Maglev
We own and operate physical infrastructure for our backend services. We need an effective way to route arbitrary TCP and UDP traffic between services and also from outside these data centers.
UtahFS: Encrypted File Storage
Several months ago, I realized that I had a lot of sensitive files on my computer (my diary, if you must know) that I was afraid of losing, but I didn’t feel comfortable putting them in something like Google Drive or Dropbox. Introducing UtahFS.
Ladies and Gentlemen…Cloudflare TV!
I'm excited to announce the upcoming launch of Cloudflare TV. A 24x7 live television broadcast, streamed globally via the Cloudflare network. You can tune in to the pre-broadcast station and check out the upcoming schedule at: cloudflare.tv
How we use HashiCorp Nomad
A walkthrough on how we are improving the reliability of our management services running in each data center by using Nomad for dynamic task scheduling.
Cyberattacks since the murder of George Floyd
As we’ve often seen in the past, real world protest and violence is usually accompanied by attacks on the Internet. This past week has been no exception.
The Serverlist: Serverless Computing vs. Containers, Serverless MySQL at Scale, and more!
Check out our sixteenth edition of The Serverlist below. Get the latest scoop on the serverless space, get your hands dirty with new developer tutorials, engage in conversations with other serverless developers, and find upcoming meetups and conferences to attend.
Export logs from Cloudflare Gateway with Logpush
Automatically export DNS query logs from Cloudflare Gateway to your SIEM.
Tanium’s endpoint security meets Cloudflare for Teams
Deploy comprehensive zero-trust security by integrating Tanium with Cloudflare for Teams.
Test your home network performance
Cloudflare launches speed.cloudflare.com, a tool that allows you to gain in-depth insights into the quality of your network uplink, including throughput, latency and jitter.
Making DNS record changes more reliable
DNS is the very first step in accessing any website, API, or pretty much anything on the Internet, which makes it mission-critical to keeping your site up and running. This week, we are launching two significant changes that allow our customers to better maintain and update their DNS records.
Secondary DNS — A faster, more resilient way to serve your DNS records
Starting today, enterprise customers who are entitled to secondary DNS will be able to configure their zone in the Cloudflare Dashboard.
Releasing Cloudflare Access’ most requested feature
You can now configure a specific identity provider for applications secured with Cloudflare Access.
Resolve internal hostnames with Cloudflare for Teams
Cloudflare for Teams customers can customize the destination for any domain name queried by devices using Cloudflare Gateway.
DeepLinks and ScrollAnchor
One of the interesting challenges with deep linking in the Cloudflare Dashboard is that most interesting resources are “locked” behind the context of an account and a zone/domain/website. To illustrate this, look at a tree of possible URL paths into Cloudflare’s Dashboard.
Backblaze B2 and the S3 Compatible API on Cloudflare
In May 2020, Backblaze, a founding Bandwidth Alliance partner announced S3 compatible APIs for their B2 Cloud Storage service. We are excited to see Backblaze introduce a new level of compatibility in their Cloud Storage service.
Making Video Intuitive: An Explainer
At Cloudflare, we work to provide a great viewing experience while keeping our service affordable. In this post, let's have some fun to see changes between different versions of a video.
CUBIC and HyStart++ Support in quiche
Congestion control and loss recovery play a big role in the QUIC transport protocol performance. We recently added support for CUBIC and HyStart++ to quiche, the library powering Cloudflare's QUIC, and lab-based testing shows promising results for performance in lossy network conditions.
Cinco de Mayo - What are we celebrating anyway?
Latinflare explores the Cinco de Mayo holiday and shares the perspective of various employees from around the globe.
Setting up Cloudflare for Teams as a Start-Up Business
S2 Systems, recently acquired by Cloudflare, provides a start-up’s perspective of setting up Cloudflare for Teams and how it solved some problems that we struggled with for way too long.
A single dashboard for Cloudflare for Teams
Cloudflare Access is now available in the Cloudflare for Teams UI. You can now manage application and threat security for your organization in a single dashboard.
When people pause the Internet goes quiet
As human behaviour has changed in response to the pandemic, it's left a mark on the charts that network operators look at day in, day out to ensure that their networks are running correctly.
DDoS attacks have evolved, and so should your DDoS protection
Building a modern DDoS solution that is truly effective in thwarting ever-evolving DDoS attacks, to protect all of our customers has been a core tenet for us - enabling us to be an industry leader.
Empowering our Customers and Service Partners
We wanted to highlight some amazing partners and our growing support and training for MSPs around the globe.
The Serverlist: Workers Supports COBOL, Workers @ Opendoor, and more!
Check out our fifteenth edition of The Serverlist below. Get the latest scoop on the serverless space, get your hands dirty with new developer tutorials, engage in conversations with other serverless developers, and find upcoming meetups and conferences to attend.
Doubling the intern class - and making it all virtual
We have found interns to be invaluable. Not only do they bring an electrifying new energy over the summer, but they also come with their curiosity to help solve problems, contribute to major projects, and bring refreshing perspectives to the company.
Creating a True One-Stop Solution for Companies to Go Global: Announcing a Partnership Between Cloudflare and JD Cloud & AI
Our mission is to help build a better Internet, for everyone, everywhere. So, today we’re excited to announce a significant strategic partnership with JD Cloud & AI, the cloud and intelligent technology business unit of Chinese Internet giant JD.com.
Releasing kubectl support in Access
Starting today, you can use Cloudflare Access and Argo Tunnel to securely manage your Kubernetes cluster with the kubectl command-line tool. SSO requirements and a zero-trust model to your Kubernetes management in under 30 minutes.
Stream Firewall Events directly to your SIEM
As of today, customers using Cloudflare Logs can create Logpush jobs that send only Firewall Events. These events arrive much faster than our existing HTTP requests logs: they are typically delivered to your logging platform within 60 seconds of sending the response to the client.
Internet performance during the COVID-19 emergency
The Internet has shown that it was built for this: designed to handle huge changes in traffic, outages, and a changing mix of use. As we are well into April I thought it was time for an update.
Deploying Gateway using a Raspberry Pi, DNS over HTTPS and Pi-hole
Like many, I work remotely and want to show how to deploy Cloudflare Gateway from home. Its DNS filtering protects networks from malware, phishing, ransomware, and other security threats effectively.
Helping with COVID-19 Projects: Cloudflare Workers now free through Project Galileo
The Internet has been vital to our response to the COVID-19 crisis: enabling researchers to communicate with the rest of the world, connecting resources with people who need them, and sharing data about the spread.
Is BGP Safe Yet? No. But we are tracking it carefully
BGP leaks and leaks and hijacks have been accepted as an unavoidable part of the Internet for far too long. Today, we are releasing isBGPSafeYet.com, a website to track deployments and filtering of invalid routes by the major networks.
Time-Based One-Time Passwords for Phone Support
Cloudflare Enterprise customers can now authenticate themselves for phone support using TOTP tokens, either by using an authenticator app or generating single-use tokens from the Cloudflare Dashboard.
Cloudflare Workers Now Support COBOL
COBOL is often a source of amusement for programmers because it is seen as old, verbose, clunky, and difficult to maintain. COBOL can now be used to write code for Cloudflare’s serverless platform Workers.
Cloudflare Dashboard and API Outage on April 15, 2020
Starting at 1531 UTC and lasting until 1952 UTC, the Cloudflare Dashboard and API were unavailable because of the disconnection of multiple, redundant fibre connections from one of our two core data centers.
Offer of Assistance to Governments During COVID-19
During the spread of COVID-19, Cloudflare is offering free services to government agencies around the world to help them stay online and provide essential information to the public.
Comparing HTTP/3 vs. HTTP/2 Performance
We announced support for HTTP/3, the successor to HTTP/2, during Cloudflare’s birthday week last year. Our goal is and has always been to help build a better Internet. Even though HTTP/3 is still in draft status, we've seen a lot of interest from our users.
Helping sites get back online: the origin monitoring intern project
Over the course of ten weeks, our team of three interns (two engineering, one product management) went from a problem statement to a new feature, which is still working in production for all Cloudflare customers.
Cloudflare for SSH, RDP and Minecraft
Cloudflare now covers SSH, RDP and Minecraft, offering DDoS protection and increased network performance. Spectrum pay-as-you-go now available on all paid plans.
Remote work, regional lockdowns and migration of Internet usage
As a large portion of Internet access shifted from office-focused areas, like city centers and business parks, towards more residential areas like suburbs and outlying towns, we wanted to find out just precisely how broad this geographical traffic migration was.
Rolling With The Punches: Shifting Attack Tactics & Dropping Packets Faster & Cheaper At The Edge
Over the past 6 months, volumetric DDoS attacks decreased by 82%. However volumetric attacks are not gone yet, still peaking as high as 418 Gbps. In this post, we cover the changing attack landscape and how Cloudflare adapts and evolves to keep the internet safe.
Internship Experience: Cryptography Engineer
A member of the research team recounts his experience as an intern.
Moving from reCAPTCHA to hCaptcha
We recently migrated the CAPTCHA provider we use from Google's reCAPTCHA to a service provided by the independent hCaptcha. Here's a walk through of the rationale in more detail.
How To Use 1.1.1.1 w/ WARP App And Cloudflare Gateway To Protect Your Phone From Security Threats
Starting today, you can get even more out of your 1.1.1.1 app. By adding Cloudflare Gateway’s secure DNS filtering to your 1.1.1.1 app, you can add a layer of security and block malicious domains flagged as phishing, command and control, or spam.
Project Crossbow: Lessons from Refactoring a Large-Scale Internal Tool
Crossbow is a tool that is now allowing Cloudflare’s Technical Support Engineers to perform diagnostic activities from running commands (like traceroutes, cURL requests and DNS queries) to debugging product features and performance features using bespoke tools.
Conntrack tales - one thousand and one flows
We were wondering - can we just enable Linux "conntrack"? How does it actually work? I volunteered to help the team understand the dark corners of the Linux's "conntrack" stateful firewall subsystem.
The Serverlist: Built with Workers, Single-Tenant Architecture, and more!
Check out our fourteenth edition of The Serverlist below. Get the latest scoop on the serverless space, get your hands dirty with new developer tutorials, engage in conversations with other serverless developers, and find upcoming meetups and conferences to attend.
Trailblazing a Development Environment for Workers
When I arrived at Cloudflare for an internship in the summer of 2018, I was taken on a tour, introduced to my mentor who took me out for coffee (shoutout to Preston), and given a quick whiteboard overview of how Cloudflare works.
The Mistake that Caused 1.1.1.3 to Block LGBTQIA+ Sites Today
Today we made a mistake. The mistake caused a number of LGBTQIA+ sites to inadvertently be blocked by the new 1.1.1.1 for Families service. I wanted to walk through what happened, why, and what we've done to fix it.
Cloudflare Doubling Size of 2020 Summer Intern Class
Today we are announcing that we will double the size of Cloudflare’s summer 2020 internship class.
Announcing the Beta for WARP for macOS and Windows
While WARP started as an option within the 1.1.1.1 app, it's really a technology that can benefit any device connected to the Internet. In fact, one of the most common requests we've gotten over the last year is support for WARP for macOS and Windows. Today we're announcing exactly that.
Introducing 1.1.1.1 for Families
Introducing 1.1.1.1 for Families — the easiest way to add a layer of protection to your home network and protect it from malware and adult content.
Cloudflare now supports security keys with Web Authentication (WebAuthn)!
We’re excited to announce that Cloudflare now supports security keys as a two factor authentication (2FA) method for all users.
Announcing the Results of the 1.1.1.1 Public DNS Resolver Privacy Examination
We took a big step toward improving Internet privacy and security with the launch of the 1.1.1.1 public DNS resolver. And we really meant privacy first. We were not satisfied with the status quo and believed that secure DNS resolution with transparent privacy practices should be the new normal.
Introducing Quicksilver: Configuration Distribution at Internet Scale
At peak, Cloudflare’s network processes more than 14 million HTTP requests per second. We spend a lot of time thinking about the tools we use to make those requests faster and more secure.
Migrating from VPN to Access
With so many people at Cloudflare now working remotely, it's worth stepping back and looking at the systems we use to get work done and how we protect them. Over the years we've migrated from a traditional "put it behind the VPN!" company to a modern zero-trust architecture.