2,113 articles from Cloudflare.
Cloudflare mitigated a 12-hour DDoS attack against Moldova's Central Election Commission, blocking over 898 million malicious requests that peaked at 324,333 requests per second. This defense kept critical election infrastructure online and accessible for citizens during a critical parliamentary vote.
We identified and patched two DDoS vulnerabilities in our QUIC implementation related to packet acknowledgements. Cloudflare customers were not affected. We examine the "Optimistic ACK" attack vector and our solution, which dynamically skips packet numbers to validate client behavior.
Cloudflare Workers' support for automatic tracing is now in open beta! Export traces to any OpenTelemetry-compatible provider for deeper application observability -- no code changes required
Today over half of human-initiated traffic with Cloudflare is protected against harvest-now/decrypt-later with post-quantum encryption. What once was a cool science project, is the new security baseline for the Internet. We’re not done yet: in this blog post we’ll take measure where we are, what we expect for the coming years, and what you can do today.
Cloudflare is launching an experiment with Chrome to evaluate fast, scalable, and quantum-ready Merkle Tree Certificates, all without degrading performance or changing WebPKI trust relationships.
In Q3 2025, global Internet disruptions were caused by everything from government shutdowns to stray bullets and earthquakes. This report analyzes the traffic data behind these outages to show their real-world impact on connectivity.
We present a data-driven framework to quantify cross-layer Internet resilience. We also share a list of measurements with which to quantify facets of Internet resilience for geographical areas.
While large cloud providers hold vast troves of passive network data, analyzing them is complicated. The scale, noise, and absence of definitive ground truth all create major hurdles. Yet by carefully quantifying these constraints and finding alternative forms of evidence, meaningful insights can still emerge.
Coinciding with the ACM’s Internet Measurement Conference, the Cloudflare Research team is publishing a series of posts this week to share their research on building a more measurable, resilient, and transparent Internet. These posts will cover foundational concepts in Internet measurement, Internet resilience, cryptography, and networking.
Cloudflare Radar has evolved significantly since its 2020 launch, offering deeper insights into Internet security, routing, and traffic with new tools and data that help anyone understand what's happening online.
Cloudflare Radar has launched a new Top-Level Domain (TLD) page, providing insights into TLD popularity, traffic, and security. The top-ranking TLD may come as a surprise.
A recent npm supply chain attack compromised 18 popular packages. This post explains how Cloudflare’s graph-based machine learning model, which analyzes 3.5 billion scripts daily, was built to detect and block exactly this kind of threat automatically.
Cloudflare is partnering with Visa and Mastercard to help secure the future of agentic commerce.
This post explores the performance of BPF LPM tries, a critical data structure used for IP matching. It delves into the trie algorithm, presents benchmark data, and explains how the current kernel implementation’s design choices lead to performance bottlenecks.
Cloudflare Load Balancing now supports Monitor Groups, allowing you to combine multiple health monitors into a single, logical assessment. Create sophisticated health checks for complex applications, define critical dependencies, and make smarter failover decisions.
Today, there's no way to audit a site’s client-side code as it changes, making it hard to trust sites that use cryptography. We preview a specification we coauthored that adds auditability to the web.
Cloudflare investigated CPU performance benchmark results for Workers, uncovering and fixing issues in infrastructure, V8 garbage collection, and OpenNext optimizations. These improvements have made Cloudflare Workers faster for all customers.
We're launching Cloudforce One REACT, a team of expert security responders designed to eliminate the gap between perimeter defense and internal incident response. The team brings unmatched threat intelligence and network-native mitigation to help organizations prepare for and respond to security crises across any environment.
84 million requests a second means even rare bugs appear often. We'll reveal how we discovered a race condition in the Go arm64 compiler and got it fixed.
We demonstrate how the open-source Payload CMS was ported to run entirely on Cloudflare's developer platform. This post details the technical work required, including building custom database and storage adapters for D1 and R2, and how we’re using Payload to help power Cloudflare TV.
On September 29, 2025, Internet connectivity was completely shut down across Afghanistan, impacting business, education, finance, and government services. It follows regional shutdowns that began several weeks prior, ostensibly to prevent “immoral activities”.
Cloudflare just turned 15! Birthday Week 2025 celebrated innovation at scale: Rust-powered core systems, post-quantum upgrades, developer access for students, PlanetScale integration, open-source partnerships, and our biggest internship program ever — 1,111 interns in 2026.
Cloudflare is using its vast traffic to send responses faster than ever before, by learning the characteristics of each individual network and tuning our congestion control system.
We’ve replaced the original core system in Cloudflare with a new modular Rust-based proxy, replacing NGINX. It’s not only substantially faster for all our customers, it’s also more secure, and lets us ship new products quicker than ever before.
Cloudflare Radar offers two new features: regional Internet traffic visibility for a more local perspective on trends and disruptions, and a new dashboard bringing insights into Certificate Transparency, the ecosystem which ensures that all website certificates are publicly visible & auditable.
We reduced Cloudflare Workers cold starts by 10x by optimistically routing to servers with already-loaded Workers. Learn how we did it here.
Today, we’re announcing two enhancements to our Application Performance suite. Observatory and Smart Shield allow you to see how the world sees your website, and make it faster with one click. Available inside the Cloudflare Dashboard today!
Cloudflare will soon automatically create an AI-optimized search index for your domain, and expose a set of ready-to-use standard APIs and tools including an MCP server, LLMs.txt, and a search API. For AI builders, Cloudflare will offer a new way to discover and retrieve web content.
AS-SETs, for better or worse, are critical data sources that help build BGP route filters across the Internet. Because these AS-SET objects are based solely on trust, they can be misused. We will cover some of the reasons why operators need to monitor the AS-SET memberships for their ASN, and now Cloudflare Radar can help.
On the Internet, being fast is what matters and at Cloudflare, we are committed to being the fastest network in the world. In this post, we will share how our network performance has changed since our last post in September 2024, and discuss the tools and processes we are using to assess network performance.
It turns out we've all been using MCP wrong. Most agents today use MCP by exposing the "tools" directly to the LLM. We tried something different: Convert the MCP tools into a TypeScript API, and then ask an LLM to write code that calls that API. The results are striking.
Over the year we have greatly expanded Node.js compatibility. There are hundreds of new Node.js APIs now available that make it easier to run existing Node.js code on our platform. This has been a major initiative for us, and we are excited to share the progress we've made.
We're making it easier for developers to build amazing things, by introducing major upgrades like external model support in AI Search (previously AutoRAG), updates to Node.js compatibility, support for larger and more concurrent container instances, and more! Plus, new tools like, transactional email, and GAed support for Workers Builds, Media Transformations, and Browser Rendering with Playwright
The Cloudflare Data Platform, launching today, is a fully-managed suite of products for ingesting, transforming, storing, and querying analytical data, built on Apache Iceberg and R2 storage.
As governments around the world eye AI for national transformation, Cloudflare champions AI sovereignty through choice: diverse tools, data control, and no vendor lock-in. We're enabling this in India, Japan, and Southeast Asia, offering local, open-source models on Workers AI, fostering innovation.
R2 SQL provides a built-in, serverless way to run ad-hoc analytic queries against your R2 Data Catalog. This post dives deep under the Iceberg into how we built this distributed engine, from its metadata-driven planner to its parallel execution model.
We’ve teamed up with PlanetScale to make shipping full-stack applications on Cloudflare Workers even easier. Connect your PlanetScale and Cloudflare accounts together and automatically get distributed connection pooling and query caching for any PlanetScale Postgres or MySQL database.
Cloudflare Workers are constantly being updated to be as secure and efficient as possible. We are further hardening Workers by making use of the latest software and hardware features. We use defense-in-depth, including V8 sandboxes and the CPU's memory protection keys, to keep your data safe.
Today, we’re launching Cloudflare Email Service. Send and receive email directly from your Workers with native bindings—no API keys needed. We're unifying email sending and routing into a single service built for developers. Sign up for the private beta.
Cloudflare is making every feature available to any customer.
Cloudflare’s Content Signals Policy gives creators a new tool to control use of their content.
To prepare for a future where powerful quantum computers come online, we've upgraded our WARP client with post-quantum cryptography. This protects both consumers and enterprises from adversaries that harvest Internet traffic now and then decrypt it in the future using powerful quantum computers.
We are proposing—as starting points—responsible AI bot principles that emphasize transparency, accountability, and respect for content access and use preferences. These are a launchpad for a larger conversation, and we recognize that there is work to be done to address many nuanced perspectives.
Cloudflare has made it even easier to enable our free child safety tooling for all customers.
The recent Salesloft breach taught us one thing: companies do not have visibility over data in SaaS applications. Cloudflare is committing to providing additional security tools to companies who use SaaS applications and downstream integrations.
We are excited to announce that Project Galileo will now include access to Cloudflare's Bot Management and AI Crawl Control services. Participants in the program, which include roughly 750 journalists, independent news organizations, and other non-profits supporting news-gathering around the world, will now have the ability to protect their websites from AI crawlers - for free.
Cloudflare is partnering with Coinbase to create the x402 Foundation and adding x402 support to the Agents SDK & MCP Servers.
Today, Cloudflare is proud to announce support for two cornerstone frameworks in the modern web ecosystem: we’re partnering with Webflow to sponsor Astro, and with Netlify to sponsor TanStack.
Cloudflare is doing anomaly detection like never before. Today, we’re sharing how we build and deploy bespoke, per-customer models to detect traffic anomalies and catch more sophisticated bots in bot management and Super Bot Fight Mode. As we develop a new generation.
Cloudflare Confidence Scorecards are now live in the Application Library. Get transparent risk ratings for SaaS and Gen-AI apps.
Introducing VibeSDK, an open-source AI "vibe coding" platform that anyone can deploy to build their own custom platform. Comes ready with code generation, sandbox environment, and project deployment.
Cap'n Web is a new open source, JavaScript-native RPC protocol for use in browsers and web servers. It provides the expressive power of Cap'n Proto, but with no schemas and no boilerplate.
We're expanding Cloudflare for Startups to include non-profits, civil society, and public interest orgs. Eligible organizations can now receive up to $250,000 in Cloudflare credits for our developer and core products, including AI, databases, and security.
Workers Launchpad program offers resources and mentorship for founders building on the Cloudflare network. Learn more about prior cohorts, where Launchpad alumni are today, and the participants of Workers Launchpad Cohort #6.
We are incredibly excited to announce our most ambitious intern program yet: Cloudflare aims to hire as many as 1,111 interns over the course of 2026.
Students in the United States over the age of 18 with a .edu email can now get one year of free access to Cloudflare developer features. Build, experiment, and launch projects with production-grade tools, plus connect with peers in our student developer community.
We're excited to announce our support of two independent, open source projects: Ladybird, an ambitious project to build a completely independent browser from the ground up, and Omarchy, an opinionated Arch Linux setup for developers.
Cloudflare launched 15 years ago this week. We like to celebrate our birthday by launching new products that give back to the Internet, which will do a lot of this week. But on this occasion we've also been thinking a lot about what's changed on the Internet and what has not.
Post-quantum cryptography protects against quantum threats using today’s hardware. Quantum tech like QKD may sound appealing, but it isn’t necessary or sufficient to secure organizations.
Tired of IP Lists? Securely connect private networks to any app by its hostname, not its IP address. This powerful routing is now built into Cloudflare Tunnel and is free for all Cloudflare One customers, simplifying your Zero Trust journey.
