GitHub Actions: secure self-hosted runners by limiting them to specific workflows
You can now enforce consistent usage of self-hosted runner groups across your organization and enterprise.
Implementing a toy version of TLS 1.3
Implementing a toy version of TLS 1.3
AirPlay in a high-density environment isn't great
A Data Scientist’s Guide To Measuring Product Success - Shopify
If you’re a data scientist on a product team, much of your work involves getting a product ready for release. You may conduct exploratory data analyses to understand your product’s market, or build the data models and pipelines needed to power a new product feature, or design a machine learning model.
Those HTML Attributes You Never Use — Smashing Magazine
In this article, Louis Lazaris describes and demonstrates some interesting HTML attributes that you may or may not have heard of and perhaps find useful enough to personally use in one of your projects. This post is the result of his research, and he hopes you’ll find some of these useful to you, as you build HTML pages in the coming months.
Zero Trust for SaaS: Deploying mTLS on custom hostnames
SaaS providers can now enable mutual TLS authentication on their customer’s domains through our Access product
Cloudflare’s investigation of the January 2022 Okta compromise
Today at 03:30 UTC we learnt of a compromise of Okta. We use Okta internally for employee identity as part of our authentication stack. We have investigated this compromise carefully and do not believe we have been compromised as a result
Get updates on the health of your origin where you need them
We are thrilled to announce Health Checks availability within Cloudflare’s centralized Notification tab, available to all Pro, Business, and Enterprise customers. Now, you can get critical alerts on the health of your origin without checking your inbox!
Query parameter data types and performance
How do query parameter data types affect performance? Find out how to avoid bad performance by choosing the correct parameter types.
Improving your GitHub feed
Today, we are rolling out a new beta version of GitHub’s home feed, making it easier to discover projects, developers and more across GitHub.
Introducing the GHES repository cache
If you’re a GHES customer with heavy read traffic on your monorepo, check out the repository cache, especially if you have CI workloads distributed around the world.
Some people don't deserve access to the machine room
Shopify’s Bug Bounty Program Raises Maximum Payout in 2022 - Shopify
In 2022, Shopify's Bug Bounty Program is doubling the maximum reward to $100,000 and moving key services into the highest severity level.
Timing is Everything: Good Design Is All About The Right Timing — Smashing Magazine
Good interface design shows the right things at the right moment. We need to understand when to display a call to action, and how to build a relationship with the user before promting them to act.
Application security: Cloudflare’s view
In this post, we share some of the insights we’ve gathered from the 32 million HTTP requests/second that pass through our network
Network performance update: Security Week
Today, we’re proud to report we are the fastest provider in 71% of the top 1,000 most reported networks around the world
New cities on the Cloudflare global network: March 2022 edition
Today, we are announcing the addition of 18 new cities in Africa, South America, Asia, and the Middle East, bringing our network to over 270 cities globally
Write HTML, the HTML Way (Not the XHTML Way)
You may not use XHTML (anymore), but when you write HTML, you may be more influenced by XHTML than you think. You are very likely writing HTML, the XHTML way.
Start working on GitHub Issues faster
You can now create a branch to work on an issue directly from the issue page so that it’s easier to get started right away.
Validate all the things: improve your security with input validation!
If there’s one habit that can make software more secure, it’s probably input validation. Here’s how to apply OWASP Proactive Control C5 (Validate All Inputs) to your code.
Windows High Contrast Mode, Forced Colors Mode And CSS Custom Properties — Smashing Magazine
CSS Custom Properties can be used for far more than just color, and their values update in realtime, both via display mode updates and JavaScript logic. This is powerful stuff. Eric explains how modern CSS is a powerful piece of assistive technology that can thread into it to create flexible, maintainable and adaptive digital experiences.
Unlocking QUIC’s proxying potential with MASQUE
We continue our technical deep dive into traditional TCP proxying over HTTP
Why Don't You Use ...
A Primer on Proxies
A technical dive into traditional TCP proxying over HTTP
Where the time went during a "laptop" coding interview
Using Cloudflare One to Secure IoT devices
We asked ourselves: can we use our own products to secure IoT devices themselves — even on the same network as production systems? Using Cloudflare One, the answer is yes.
Commitment to Customer Security
Cloudflare has been hooked on securing customers globally since its inception. Our services protect customer traffic and data as well as our own, and we are continuously improving and expanding those services to respond to the changing threat landscape of the Internet
A bridge to Zero Trust
Today, we’re excited to announce the ability to route traffic from user devices with our lightweight roaming agent (WARP) installed to any network connected with our Magic IP-layer tunnels
Managing Clouds - Cloudflare CASB and our not so secret plan for what’s next
Right now we’re working on making the out-of-band CASB product a seamless part of the Zero Trust platform
Zero Trust client sessions
Starting today, you can build Zero Trust rules that require periodic authentication to control network access
Cloudflare partners with Microsoft to protect joint customers with a Global Zero Trust Network
As a company, we are constantly asking ourselves what we can do to provide more value to our customers, including integrated solutions with our partners.
Domain Scoped Roles - Early Access
Cloudflare is making it easier for enterprise account owners to manage their team’s access to Cloudflare by allowing user access to be scoped to sets of domains.
Securing Cloudflare Using Cloudflare
Cloudflare is committed to bolstering our security posture with best-in-class solutions — which is why we often turn to our own products as any other Cloudflare customer would.
Cloudflare Observability
Being a single pane of glass for all network activity has always been one of Cloudflare’s goals. Today, we’re outlining the future vision for Cloudflare observability.
Introducing SSH command logging
We built SSH command logging into Cloudflare Zero Trust to provide SSH visibility at a network layer instead of relying on software on individual machines
How To Make A Drag-and-Drop File Uploader With Vue.js 3 — Smashing Magazine
Building on a previous article on How to Build a Drag-and-Drop File Uploader, we’ll be adding some new features, but more importantly (maybe), we’ll be learning how to build it in Vue 3 and learn some best practices for Vue along the way.
Cloudflare and CrowdStrike partner to give CISOs secure control across devices, applications, and corporate networks
We're very excited to announce multiple new integrations with CrowdStrike. These integrations combine the power of Cloudflare’s expansive network and Zero Trust suite, with CrowdStrike’s Endpoint Detection and Response (EDR) and incident remediation offerings
Protect all network traffic with Cloudflare
Today, we’re extending the availability of Magic Transit to customers with smaller networks by offering Magic Transit-protected, Cloudflare-managed IP space
Congratulations Cloudflare 2021 Partner Award Winners
We’re thrilled to announce the winners of our annual Channel and Alliance Partner Awards for 2021
Evolving our machine learning to stop mobile bots
How Cloudflare has evolved our Machine Learning models to identify automated traffic in mobile apps
Packet captures at the edge
Today, we’re excited to announce the general availability of on-demand packet captures from Cloudflare’s global network
Cloudflare and Aruba partner to deliver a seamless global secure network from the branch to the cloud
Today we are excited to announce that Cloudflare and Aruba are working together to develop a solution that will enable Aruba customers to connect EdgeConnect SD-WAN’s with Cloudflare's global network to further secure their corporate traffic with Cloudflare One
Clientless Web Isolation is now generally available
Today, we’re excited to announce that Clientless Web Isolation is generally available
Release Radar
Our community has shipped lots of open source project updates in the last month. Here’s a few of our staff picks.
Detecting silent errors in the wild: Combining two novel approaches to quickly detect silent data corruptions at scale
Silent data corruptions (SDCs), data errors that go undetected by the larger system, are a widespread problem for large-scale infrastructure systems. Left undetected, these types of corruptions can cause data loss and propagate across the stack and manifest as application-level problems. Silent data corruptions (SDC) in hardware impact computational integrity for large-scale applications. Sources
Discussing two "holy war" topics at the same time
Using Terraform to Manage Infrastructure - Shopify
Large applications are often a mix of code your team has written and third-party applications your team needs to manage. These third-party applications could be things like AWS or Docker. In my team’s case, it’s Twilio TaskRouter. The configuration of these services may not change as often as your app code does, but when it does, the process is fraught with the potential for errors. This is becaus
How to improve performance with Next.js
Learn how Next.js provides a toolkit to improve site performance, improve the developer experience, and decrease build times with every upgrade.
Announcing the Cloudflare API Gateway
Today we’re announcing the Cloudflare API Gateway. We’re going to completely replace your existing gateway at a fraction of the cost
Save time with partial re-runs in GitHub Actions
It is now possible to re-run only failed jobs or a single job in GitHub Actions workflows.
Claymorphism: Will It Stick Around? — Smashing Magazine
This fresh new design trend has been picking up steam with the rising popularity of colorful inflated 3D graphics in web illustrations and with the latest Virtual Reality projects like “Horizon Worlds”. Let’s see if there is room for Claymorphism on the UI, and how we can create this effect with CSS.
WAF for everyone: protecting the web from high severity vulnerabilities
We are excited to provide our new Cloudflare Web Application Firewall, with a Free Managed Ruleset to all Cloudflare users
Improving the WAF with Machine Learning
Today we are excited to complement managed rulesets (such as OWASP and Cloudflare Managed) with a new tool aimed at identifying bypasses and malicious payloads without human involvement, and before they are exploited
IDC MarketScape positions Cloudflare as a Leader among worldwide Commercial CDN providers
We are thrilled to announce that Cloudflare has been positioned in the Leaders category in the IDC MarketScape: Worldwide Commercial CDN 2022 Vendor Assessment
A new WAF experience
The security landscape is moving fast. We invited users to help us shape a new WAF experience that enables us to evolve WAF to meet their demands and use cases
Cloudflare Zaraz supports CSP
If you have Cloudflare Zaraz enabled on your website, you don’t have to ask yourself twice if you should enable CSP because there’s no harmful collision between CSP & Cloudflare Zaraz
Pipeline mode for better PostgreSQL performance on slow networks
This article shows how pipeline mode, new with PostgreSQL v14, can improve query performance over slow network connections.
Delightful React File/Directory Structure
How should we structure components and other files in our React apps? I've iterated my way to a solution I'm really happy with. In this blog post, I'll share how it works, what the tradeoffs are, and how I mitigate them.
VESPA: Static profiling for binary optimization
What the research is: Recent research has demonstrated that binary optimization is important for achieving peak performance for various applications. For instance, the state-of-the-art BOLT binary optimizer developed at Meta, which is part of the LLVM Compiler Project, significantly improves the performance of highly optimized binaries produced using compilers’ most aggressive optimizations, such
