Articles from Source: Cloudflare-Blog

Human Native is joining Cloudflare

2026-01-15 14:00
🌐 Cloudflare has acquired Human Native, a UK-based AI data marketplace. This move aims to enhance the transformation of multimedia content into searchable data. 📊 Human Native focuses on providing high-quality, licensed data to AI developers, improving AI performance. Their approach emphasizes treating data as a valuable asset. ⚖️ With this acquisition, Cloudflare plans to support content creators in controlling how their work is accessed by AI systems. New tools like AI Crawl Control and Pay...
Source: Cloudflare Blog
James Smith

What came first: the CNAME or the A record?

2026-01-14 00:00
🌐 A recent update to 1.1.1.1 inadvertently changed the order of CNAME records in DNS responses, leading to resolution failures for some users. The issue arose during an effort to optimize memory usage, with the code change deployed on January 7, 2026. This adjustment affected DNS clients that rely on a specific order of records, highlighting ambiguities in DNS protocols. For more details, check out the full article. #DNS #Networking #TechUpdate #1dot1dot1dot1 #CNAME
Source: Cloudflare Blog
Sebastiaan Neuteboom

What we know about Iran’s Internet shutdown

2026-01-13 00:00
Iran has experienced a significant Internet shutdown, with traffic effectively dropping to zero since January 8, 2026. This follows widespread protests across the country related to economic issues and calls for leadership change. 📉 Cloudflare Radar data indicates that the Iranian government often disrupts connectivity during protests, a pattern seen in previous instances like the 2019 fuel protests and the 2022 demonstrations after Mahsa Amini's death. 📵 On January 8, there was a dramatic...
Source: Cloudflare Blog
David Belson

A closer look at a BGP anomaly in Venezuela

2026-01-06 08:00
On January 2, a BGP anomaly was observed in Venezuela, raising questions about its cause. A cybersecurity newsletter analyzed Cloudflare Radar data, noting eleven route leak events involving the ISP CANTV (AS8048) since December. These route leaks suggest possible issues with the ISP's routing policies rather than intentional wrongdoing. BGP route leaks occur when routing announcements extend beyond their intended scope, causing potential delays in network traffic. This post explores the...
Source: Cloudflare Blog
Bryton Herdes

How Workers powers our internal maintenance scheduling pipeline

2025-12-22 14:00
Cloudflare has developed a maintenance scheduler using Workers to enhance the safety of data center operations globally. 🌍 With over 330 data centers, managing maintenance manually proved challenging. The new system automates oversight, reducing the risk of conflicts during hardware updates. ⚙️ This scheduler analyzes multiple metrics to ensure critical services remain reliable, avoiding potential downtime for customers. 🔒 Learn more about how this technology is transforming maintenance...
Source: Cloudflare Blog
Michael Hoffmann

Code Orange: Fail Small — Our resilience plan following recent incidents

2025-12-19 22:35
🚨 Cloudflare has declared "Code Orange: Fail Small" to enhance network resilience after two recent outages. These incidents, occurring on November 18 and December 5, resulted in significant service disruptions, prompting a commitment to prevent future occurrences. Key initiatives include controlled rollouts for configuration changes, improved failure mode testing, and revamped emergency procedures. Cloudflare aims for incremental improvements to ensure a more reliable network for all users....
Source: Cloudflare Blog
Dane Knecht

Innovating to address streaming abuse — and our latest transparency report

2025-12-19 14:00
🌐 Cloudflare's H1 2025 Transparency Report is now available. This report outlines their handling of legal requests and service abuse, showcasing their ongoing commitment to transparency. 📊 The latest updates focus on combating unauthorized streaming and copyright violations. Cloudflare is exploring innovative methods to identify and address these issues, especially in light of evolving tactics by bad actors. 🤝 Collaboration with rightsholders and policymakers is key in their approach to...
Source: Cloudflare Blog
Justin Paine

Announcing support for GROUP BY, SUM, and other aggregation queries in R2 SQL

2025-12-18 14:00
📢 Exciting news from Cloudflare! R2 SQL now supports GROUP BY and aggregation queries. These features enable users to analyze large datasets efficiently, providing valuable insights and generating reports. With aggregation, spotting trends and anomalies in data becomes much simpler. Learn about the mechanics of these new functionalities and how they enhance your data analytics experience with R2 SQL! #Cloudflare #R2SQL #DataAnalytics #SQLQueries #TechUpdates
Source: Cloudflare Blog
Marc Selwan

ChatGPT's rivals, Kwai's quiet rise: the top Internet services of 2025

2025-12-15 14:00
🌐 The 2025 Internet landscape is evolving rapidly, according to Cloudflare’s latest report. AI competition has intensified, with ChatGPT facing strong challengers like Claude and Gemini. Instagram has risen in popularity, while TikTok and X saw declines. 📈 E-commerce is shifting as Shopee and Temu join Amazon in the top ranks. Kwai is making strides in emerging markets, particularly Brazil. 🛒 For more insights on trending platforms and services, check out the full report! #InternetTrends #AI...
Source: Cloudflare Blog
João Tomé

The 2025 Cloudflare Radar Year in Review: The rise of AI, post-quantum, and record-breaking DDoS attacks

2025-12-15 14:00
📊 The 2025 Cloudflare Radar Year in Review is now available! This sixth annual report reveals significant Internet trends and patterns from the past year. 🌐 Covering topics like AI advancements, connectivity, and security, the review offers insights based on Cloudflare's extensive global network. It features interactive charts and graphs for a detailed understanding of traffic and DDoS attack trends. 🔍 Explore the findings across six key sections: Traffic, AI, Adoption & Usage, Connectivity,...
Source: Cloudflare Blog
David Belson

Python Workers redux: fast cold starts, packages, and a uv-first workflow

2025-12-08 06:00
Cloudflare has enhanced Python Workers, offering faster cold starts and improved package support for serverless applications. Developers can now utilize a wide range of packages through Pyodide, drastically speeding up deployment times. Cold start tests show Cloudflare Workers outperform AWS Lambda and Google Cloud Run, starting over 2.4x and 3x faster, respectively. With simple code, you can deploy a FastAPI app globally in under two minutes. The free tier allows for 100,000 requests daily....
Source: Cloudflare Blog
Mike Nomitch

Cloudflare outage on December 5, 2025

2025-12-05 00:00
On December 5, 2025, Cloudflare faced a significant outage beginning at 08:47 UTC, lasting around 25 minutes. This affected about 28% of HTTP traffic served by Cloudflare. 🚨 The issue stemmed from configuration changes aimed at addressing a vulnerability in React Server Components, not from any cyber attack. Cloudflare acknowledges the impact on customers and is committed to preventing future incidents. 🔒 Further details on their plans for improvement will be shared next week. #Cloudflare...
Source: Cloudflare Blog
Dane Knecht

Cloudflare's 2025 Q3 DDoS threat report -- including Aisuru, the apex of botnets

2025-12-03 14:00
📊 Cloudflare's 2025 Q3 DDoS Threat Report reveals significant threats in the DDoS landscape. The Aisuru botnet, with 1-4 million infected hosts, led to hyper-volumetric attacks peaking at 29.7 Tbps. DDoS attacks surged by 15% QoQ and 40% YoY, with 8.3 million attacks mitigated this quarter. Notably, attacks against AI companies rose 347% MoM, reflecting growing public concern. #DDoS #Cybersecurity #Cloudflare #ThreatReport #TechNews
Source: Cloudflare Blog
Jorge Pacheco

Cloudflare WAF proactively protects against React vulnerability

2025-12-03 00:00
🚨 Cloudflare has implemented new protections against a critical vulnerability in React Server Components (CVE-2025-55182). All customers are automatically shielded when their traffic is routed through the Cloudflare Web Application Firewall (WAF). This includes both free and paid users. Cloudflare Workers are immune to this exploit, ensuring that React applications deployed on them remain secure. For optimal safety, users are advised to update to React 19.2.1 and the latest versions of...
Source: Cloudflare Blog
Daniele Molteni

Why Replicate is joining Cloudflare

2025-12-01 06:00
🚀 Exciting news! Replicate is now part of Cloudflare! Since 2019, Replicate has focused on making AI models accessible to developers, enabling them to create innovative applications. Their journey began with tools like Cog and evolved into a platform that supports running models in the cloud. Cloudflare's robust infrastructure will enhance Replicate's offerings, allowing for faster, edge-based AI solutions and more complex application stacks. Together, they aim to redefine AI infrastructure....
Source: Cloudflare Blog
Ben Firshman

Partnering with Black Forest Labs to bring FLUX.2 [dev] to Workers AI

2025-11-25 00:00
🚀 Exciting news! Black Forest Labs has launched FLUX.2 [dev] on Workers AI! This advanced open-weight image model enhances photorealism and offers multi-reference input with JSON prompting. 📸 FLUX.2 builds on the success of FLUX.1, generating realistic images with improved customization options. It supports up to 4 input images and produces outputs up to 4 megapixels. 🌍 The model excels in understanding the physical world, delivering accurate details like lighting, angles, and small objects....
Source: Cloudflare Blog
David Liu

Get better visibility for the WAF with payload logging

2025-11-24 14:00
Enhance your understanding of Cloudflare's Web Application Firewall (WAF) with revamped payload logging! 📊 The WAF is designed to protect against layer 7 attacks, offering tools like managed rules and custom rules for tailored security. However, false positives can occur, requiring fine-tuning based on customer data. New logging improvements aim to provide clearer insights into WAF actions, reducing noise and increasing signal for better decision-making. 🛡️ #WAF #CyberSecurity #Cloudflare...
Source: Cloudflare Blog
Paschal Obba

Cloudflare outage on November 18, 2025

2025-11-18 00:00
On November 18, 2025, Cloudflare experienced a significant service outage due to a bug in its Bot Management feature. The issue caused core network traffic failures, leading to error messages for users accessing affected sites. The outage stemmed from a database permission change, resulting in a feature file doubling in size. This exceeded the software's processing limits, disrupting traffic routing. While initially suspected to be a DDoS attack, the true cause was identified and resolved by...
Source: Cloudflare Blog
Matthew Prince

Replicate is joining Cloudflare

2025-11-17 14:00
🚀 Big news in the tech world! Replicate is joining forces with Cloudflare. This partnership aims to enhance the Workers Platform, making it easier to build and deploy AI applications. 💡 Existing Replicate users can expect uninterrupted APIs and improved performance through Cloudflare's global network. Meanwhile, Workers AI users will gain access to a larger model catalog and the ability to run custom models directly. This collaboration focuses on simplifying AI deployment for developers,...
Source: Cloudflare Blog
Ben Firshman

Finding the grain of sand in a heap of Salt

2025-11-13 14:00
Discover how Cloudflare tackles configuration management challenges with Saltstack. 🌐 The article outlines the methods used to reduce release delays by over 5% due to Salt failures. By addressing architectural issues, Cloudflare created a system to identify the root causes of failures effectively. It highlights Salt's role in maintaining system integrity and preventing configuration drift. Understanding Salt’s architecture allows for better management of large fleets of servers. ⚙️...
Source: Cloudflare Blog
Nick Rhodes

Connecting to production: the architecture of remote bindings

2025-11-12 14:00
🚀 Exciting news for developers! Remote bindings are now generally available, allowing you to connect your local Worker code to deployed Cloudflare resources like R2 and D1. This enables you to test local code changes against real data without needing to deploy each time. The integration aims to enhance the local development experience, combining the advantages of local testing with access to remote resources. Discover more about this feature and its development journey in the full article!...
Source: Cloudflare Blog
Dario Piotrowicz

A closer look at Python Workflows, now in beta

2025-11-10 14:00
🚀 Cloudflare has introduced Python Workflows in beta, expanding its durable execution engine for multi-step applications. Developers can now automate complex tasks using Python, enhancing productivity and reducing friction. This feature supports idempotent steps with built-in error handling and retry capabilities. Python's integration allows for seamless orchestration in data pipelines and AI model training, making it an ideal choice for developers. Explore the possibilities with Python...
Source: Cloudflare Blog
Mia Malden

Building a better testing experience for Workflows, our durable execution engine for multi-step applications

2025-11-04 14:00
🚀 Exciting news for developers! Cloudflare is enhancing the testing experience for Workflows, our durable execution engine. Previously, testing was a black-box process, making it hard to debug complex applications. Now, with new APIs, you can perform isolated and reliable tests locally, ensuring better visibility into each step of your Workflow. This improvement addresses developer feedback and aims to make Workflows an integral part of well-tested Cloudflare applications. #Cloudflare...
Source: Cloudflare Blog
Mia Malden

Fresh insights from old data: corroborating reports of Turkmenistan IP unblocking and firewall testing

2025-11-03 13:00
Cloudflare recently explored historical data to analyze reports of IP unblocking in Turkmenistan. The findings suggest a significant shift, with over 3 billion previously-blocked IP addresses now accessible. 📈 The increase in HTTP requests around mid-June 2024 aligns with these reports and indicates potential changes in the government's internet control mechanisms. Cloudflare's Radar also monitored TCP resets and timeouts, which may indicate firewall testing activity. This analysis...
Source: Cloudflare Blog
Marwan Fayed

BGP zombies and excessive path hunting

2025-10-31 15:30
🧟‍♂️ BGP zombies are routes stuck in the Default-Free Zone of the Internet, often due to missed prefix withdrawals. These "undead" routes can disrupt traffic, leading to inefficiencies for network operators. Path hunting, the process of searching for the best route after a prefix withdrawal, contributes to these issues. Cloudflare discusses how to minimize the impact of BGP zombies and improve routing efficiency. #BGP #Networking #Cloudflare #InternetTraffic #TechInsights
Source: Cloudflare Blog
Mingwei Zhang

Go and enhance your calm: demolishing an HTTP/2 interop problem

2025-10-31 13:00
Understanding the ENHANCE_YOUR_CALM error in HTTP/2 can help developers avoid communication issues between microservices. This article discusses how certain patterns in Go's HTTP/2 client can inadvertently trigger this error, particularly during PING flood attacks, which can lead to connection closures. The post also highlights Cloudflare’s defenses against such vulnerabilities, emphasizing the need for careful implementation to prevent denial-of-service risks. 🔧💻🚫 #HTTP2 #Cloudflare...
Source: Cloudflare Blog
Zak Cutner

Beyond IP lists: a registry format for bots and agents

2025-10-30 22:00
🌐 Exciting developments in bot and agent authentication! A new open registry format for Web Bot Auth aims to improve the way websites discover and verify cryptographic keys for bots. This initiative addresses the challenge of finding public keys for numerous agents beyond just well-known ones. The proposal supports a decentralized ecosystem, allowing for better trust in bot identities. Notably, it includes features for website operators to manage and authenticate requests more effectively. 🔗...
Source: Cloudflare Blog
Maxime Guerreiro

Anonymous credentials: rate-limiting bots and agents without compromising privacy

2025-10-30 13:00
As AI agents transform online interactions, they pose new security challenges. 🌐 Anonymous Credentials (AC) can help manage agent traffic while preserving user privacy. This approach allows website operators to implement security measures without tracking users. 🔒 Currently under development at IETF, these credentials aim to strike a balance between security and privacy in the evolving AI landscape. Stay informed on this crucial advancement! 📈 #Privacy #CyberSecurity #AI #TechNews...
Source: Cloudflare Blog
Armando Faz-Hernández

Policy, privacy and post-quantum: anonymous credentials for everyone

2025-10-30 13:00
The transition to post-quantum cryptography is underway, focusing on securing digital privacy against quantum threats. The article discusses the challenges in replacing classical cryptographic methods with quantum-resistant alternatives. Anonymous credentials (ACs) offer a way to verify facts without exposing personal information. However, as ACs start to gain traction, researchers are examining how to adapt them for a post-quantum world. The article highlights the need for solutions that...
Source: Cloudflare Blog
Christopher Patton

Defending QUIC from acknowledgement-based DDoS attacks

2025-10-29 13:00
🚨 Cloudflare has addressed two DDoS vulnerabilities in its QUIC implementation, identified as CVE-2025-4820 and CVE-2025-4821. These issues related to packet acknowledgements were reported through the Public Bug Bounty program. 🔧 The vulnerabilities allowed potential exploitation through the "Optimistic ACK" attack, which could unfairly increase connection send rates. Cloudflare has successfully patched these issues, ensuring no customers were impacted. 🌐 QUIC's reliance on acknowledgements...
Source: Cloudflare Blog
Louis Navarre (Guest author)

How to build your own VPN, or: the history of WARP

2025-10-29 13:00
🌐 Curious about WARP and VPNs? WARP started as a mobile-first security app, mimicking a traditional VPN to manage user data packets efficiently. Using Linux's networking tools, Cloudflare built a high-performance system to support millions of mobile clients. This article dives into the integration challenges and solutions faced during development. Learn how our approach to networking can shape new products! #VPN #Cloudflare #WARP #Networking #TechInsights
Source: Cloudflare Blog
Chris Branch

Measuring characteristics of TCP connections at Internet scale

2025-10-29 13:00
🌐 Researchers have long studied TCP connections, crucial for Internet interactions like web pages and streaming. At Cloudflare, millions of connections are analyzed to reveal characteristics such as lifetimes and sizes. Despite challenges in measuring connections globally, insights from Cloudflare’s CDN provide valuable data for understanding network behavior. 📊 This data aids in predicting the impact of changes in network protocols and algorithms, enhancing simulation accuracy and...
Source: Cloudflare Blog
Peter Wu

One IP address, many users: detecting CGNAT to reduce collateral effects

2025-10-29 13:00
🌐 IPv4 scarcity leads to widespread use of Carrier-Grade Network Address Translation (CGNAT), placing multiple users behind a single IP address. This shift complicates security measures that rely on individual IP accountability, especially impacting users in developing regions where IP addresses are limited. Our article discusses a method to detect large-scale IP sharing to mitigate these biases and enhance digital equity. 📈 Explore how our approach can help address socioeconomic disparities...
Source: Cloudflare Blog
Marwan Fayed

So long, and thanks for all the fish: how to escape the Linux networking stack

2025-10-29 13:00
🚀 Cloudflare continuously pushes the boundaries of network hardware and software to enhance performance and efficiency. One key innovation is soft-unicast, allowing IP address sharing across data centers. The article discusses challenges related to Linux’s networking stack when implementing this feature. To simplify operations, Cloudflare developed a dedicated service, dubbed "fish," to manage IP packets effectively. This service addresses complexities in IP address leasing and socket...
Source: Cloudflare Blog
Chris Branch

Helping protect the 2025 Moldova elections

2025-10-29 09:00
On September 28, 2025, Moldova held a pivotal parliamentary election amid concerns of foreign interference. 🌍 Cloudflare defended the Central Election Commission against a 12-hour DDoS attack, blocking over 898 million malicious requests. This ensured citizens could access critical election information without disruption. 🔒 The election was crucial for Moldova's geopolitical stance, highlighting the need for secure democratic processes. #MoldovaElections #CyberSecurity #Democracy #Cloudflare...
Source: Cloudflare Blog
Jocelyn Woolbright

A framework for measuring Internet resilience

2025-10-28 13:00
A recent article introduces a data-driven framework for measuring Internet resilience. 🌐 The framework aims to quantify how networks can withstand and recover from disruptions, highlighting the importance of diverse routing paths and competitive markets. It emphasizes that local decisions by Autonomous Systems significantly impact global connectivity, making resilience a collective effort. By sharing concrete metrics, the goal is to enhance the reliability and security of the Internet for all...
Source: Cloudflare Blog
Marwan Fayed

Keeping the Internet fast and secure: introducing Merkle Tree Certificates

2025-10-28 13:00
🌐 Cloudflare is partnering with Chrome to test Merkle Tree Certificates (MTCs), aiming to enhance Internet security against quantum threats. 🔒 With the rise of quantum computing, the need for Post-Quantum (PQ) cryptography is urgent. Currently, about 50% of Cloudflare's network traffic is protected against future decryption threats. 📈 The challenge lies in the size of new PQ algorithms, which can significantly impact performance. Cloudflare aims to redesign the Web Public-Key Infrastructure...
Source: Cloudflare Blog
Bas Westerbaan