Encrypting SNI: Fixing One of the Core Internet Bugs

Cloudflare launched on September 27, 2010. Since then, we've considered September 27th our birthday. This Thursday we'll be turning 8 years old.Ever since our first birthday, we've used the occasion to launch new products or services. | Continue reading


@blog.cloudflare.com | 5 years ago

Encrypt it or lose it: how encrypted SNI works

Today we announced support for encrypted SNI, an extension to the TLS 1.3 protocol that improves privacy of Internet users. | Continue reading


@blog.cloudflare.com | 5 years ago

Encrypting SNI: Fixing One of the Core Internet Bugs

Cloudflare launched on September 27, 2010. Since then, we've considered September 27th our birthday. This Thursday we'll be turning 8 years old.Ever since our first birthday, we've used the occasion to launch new products or services. | Continue reading


@blog.cloudflare.com | 5 years ago

Cloudflare Turns 8 – here’s what we mean by a “better Internet”

I have always loved birthdays. It is a chance to get together with loved ones, a chance to have fun and a chance to reflect on anything you want to keep doing or change in the upcoming year. | Continue reading


@blog.cloudflare.com | 5 years ago

Roughtime: Securing Time with Digital Signatures

When you visit a secure website, it offers you a TLS certificate that asserts its identity. Every certificate has an expiration date, and when it’s passed due, it is no longer valid. | Continue reading


@blog.cloudflare.com | 5 years ago

Cloudflare Crypto Week

The Internet is an amazing invention. We marvel at how it connects people, connects ideas, and makes the world smaller. But the Internet isn’t perfect. It was put together piecemeal through publicly funded research, private investment, and organic growth that has left us with an … | Continue reading


@blog.cloudflare.com | 5 years ago

Introducing the Cloudflare Onion Service

Two years ago this week Cloudflare introduced Opportunistic Encryption, a feature that provided additional security and performance benefits to websites that had not yet moved to HTTPS. | Continue reading


@blog.cloudflare.com | 5 years ago

RPKI – The required cryptographic upgrade to BGP routing

We have talked about the BGP Internet routing protocol before. We have talked about how we build a more resilient network and how we can see outages at a country-level via BGP. We have even talked about the network community that is vital to the operation of the global Internet. | Continue reading


@blog.cloudflare.com | 5 years ago

RPKI and BGP: our path to securing Internet Routing

This article will talk about our approach to network security using technologies like RPKI to sign Internet routes and protect our users and customers from route hijacks and misconfigurations. | Continue reading


@blog.cloudflare.com | 5 years ago

Expanding DNSSEC Adoption

Cloudflare first started talking about DNSSEC in 2014 and at the time, Nick Sullivan wrote: “DNSSEC is a valuable tool for improving the trust and integrity of DNS, the backbone of the modern Internet.” | Continue reading


@blog.cloudflare.com | 5 years ago

Expanding DNSSEC Adoption

Cloudflare first started talking about DNSSEC in 2014 and at the time, Nick Sullivan wrote: “DNSSEC is a valuable tool for improving the trust and integrity of DNS, the backbone of the modern Internet.” | Continue reading


@blog.cloudflare.com | 5 years ago

End to End Integrity with IPFS

This post describes how to use Cloudflare’s IPFS gateway to set up a website which is end-to-end secure, while maintaining the performance and reliability benefits of being served from Cloudflare’s edge network. | Continue reading


@blog.cloudflare.com | 5 years ago

Cloudflare Goes InterPlanetary – Introducing Cloudflare’s IPFS Gateway

Today we’re excited to introduce Cloudflare’s IPFS Gateway, an easy way to access content from the the InterPlanetary File System (IPFS) that doesn’t require installing and running any special software on your computer. | Continue reading


@blog.cloudflare.com | 5 years ago

Welcome to Crypto Week

The Internet is an amazing invention. We marvel at how it connects people, connects ideas, and makes the world smaller. But the Internet isn’t perfect. It was put together piecemeal through publicly funded research, private investment, and organic growth that has left us with an … | Continue reading


@blog.cloudflare.com | 5 years ago

Cache API for Cloudflare Workers Is Now in Beta

In October of last year we announced the launch of Cloudflare Workers. Workers allow you to run JavaScript from 150+ of Cloudflare’s data centers. This means that from the moment a request hits the Cloudflare network, you have full control over its destiny. | Continue reading


@blog.cloudflare.com | 5 years ago

Deploy Workers using Terraform

Today we're excited to announce that Cloudflare Workers are now supported in the Cloudflare Terraform Provider. | Continue reading


@blog.cloudflare.com | 5 years ago

Welcome, WP Engine

We’ve had the tremendous pleasure of working with WP Engine for nearly 5 years, starting when both companies employed less than 100 people in total. | Continue reading


@blog.cloudflare.com | 5 years ago

Protection from Struts Remote Code Execution Vulnerability (S2-057)

On August 22 a new vulnerability in the Apache Struts framework was announced. We quickly deployed a mitigation to protect customers. | Continue reading


@blog.cloudflare.com | 5 years ago

Porting our software to ARM64

As we enable more ARM64[1] machines in our network, I want to give some technical insight into the process we went through to reach software parity in our multi-architecture environment. | Continue reading


@blog.cloudflare.com | 5 years ago

Porting Our Software to ARM64

As we enable more ARM64[1] machines in our network, I want to give some technical insight into the process we went through to reach software parity in our multi-architecture environment. | Continue reading


@blog.cloudflare.com | 5 years ago

Identifying and alerting on data loss using Workers

Becoming aware and identifying data breaches as they happen, however, is not an easy task. It is often challenging for companies to become aware of their own data breaches and losses. Workers allow you to identify and get alerted on data breaches as they occur. | Continue reading


@blog.cloudflare.com | 5 years ago

Building a Diverse Business Development Team in EMEA

Cloudflare’s mission is to help build a better Internet, and we are also serious about building a diverse workforce where everyone can be themselves, regardless of their gender, sexual orientation, or cultural background. | Continue reading


@blog.cloudflare.com | 5 years ago

Gradually migrating back end frameworks while maintaining HA using ESI

In this guest post, you will learn about how the author's client, Titel Media, was able to use Cloudflare Workers to implement simple edge side includes. | Continue reading


@blog.cloudflare.com | 5 years ago

Using Workers to Make Static Sites Dynamic

The following is a guest post by Paddy Sherry, Lead Developer at Gambling.com Group. They build performance marketing websites and tools, using Cloudflare to serve to their global audience. | Continue reading


@blog.cloudflare.com | 5 years ago

Introducing ebpf_exporter

Introducing ebpf_exporter, enabling low level eBPF based metric collection from Linux kernel into Prometheus. | Continue reading


@blog.cloudflare.com | 5 years ago

Internet Native Applications

I grew up with DOS and Windows 3.1. I remember applications being *fast* - instant feedback or close to it. Today, native applications like Outlook or Apple Mail still feel fast - click compose and the window is there instantly and it feels snappy. Internet applications do not. | Continue reading


@blog.cloudflare.com | 5 years ago

Integrating redirection.io with Cloudflare Workers

Redirection.io is a Web traffic redirection manager. It provides a collection of tools for website administrators, SEO agencies, and developers, which help analyze HTTP errors, setup HTTP redirections, customize HTTP responses, and monitor the traffic efficiently. | Continue reading


@blog.cloudflare.com | 5 years ago

How Cloudflare protects customers from cache poisoning

A few days ago, Cloudflare — along with the rest of the world — learned of a "practical" cache poisoning attack. In this post I’ll walk through the attack and explain how Cloudflare mitigated it for our customers. | Continue reading


@blog.cloudflare.com | 5 years ago

The State of Internet Connectivity in Africa

Looking back at our historical data, we realized how much the Internet and Cloudflare grew. With more than 150 data centers, 10 percent of web-based applications, customers everywhere around the world, from the tiny islands in the Pacific to the big metropolises. | Continue reading


@blog.cloudflare.com | 5 years ago

Edge-Side-Includes with Cloudflare Workers

At Cloudflare we’re accelerating web assets in a number of different ways. Part of this is caching, by storing the response given by the origin server directly within our 151+ global data centers. | Continue reading


@blog.cloudflare.com | 5 years ago

African traffic growth and predictions for the future

Looking back at our historical data, we realized how much the Internet and Cloudflare grew. With more than 150 data centers, 10 percent of web-based applications, customers everywhere around the world, from the tiny islands in the Pacific to the big metropolises. | Continue reading


@blog.cloudflare.com | 5 years ago

A Detailed Look at RFC 8446 (a.k.a. TLS 1.3)

TLS 1.3 (RFC 8446) was published today. This article provides a deep dive into the changes introduced in TLS 1.3 and its impact on the future of internet security. | Continue reading


@blog.cloudflare.com | 5 years ago

A Detailed Look at RFC 8446 (a.k.a. TLS 1.3)

TLS 1.3 (RFC 8446) was published today. This article provides a deep dive into the changes introduced in TLS 1.3 and its impact on the future of internet security. | Continue reading


@blog.cloudflare.com | 5 years ago

A Detailed Look at RFC 8446 (a.k.a. TLS 1.3)

TLS 1.3 (RFC 8446) was published today. This article provides a deep dive into the changes introduced in TLS 1.3 and its impact on the future of internet security. | Continue reading


@blog.cloudflare.com | 5 years ago

Optimising Caching on Pwned Passwords

In February, Troy Hunt unveiled Pwned Passwords v2. Containing over half a billion real world leaked passwords, this database provides a vital tool for correcting the course of how the | Continue reading


@blog.cloudflare.com | 5 years ago

Use Cloudflare Stream to build secure, reliable video apps

Cloudflare Stream is the best way for any founder or developer to deliver an extraordinary video experience to their viewers while cutting development time and costs, and as of today it is available to every Cloudflare customer. | Continue reading


@blog.cloudflare.com | 5 years ago

Additional Record Types Available with Cloudflare DNS

Cloudflare recently updated the authoritative DNS service to support nine new record types. Since these records are less commonly used than what we previously supported, we thought it would be a good idea to do a brief explanation of each record type and how it is used. | Continue reading


@blog.cloudflare.com | 5 years ago

Growing the Cloudflare Apps Ecosystem

Starting today we are announcing the availability of two key pilot programs: Cloudflare Apps with Workers and Cloudflare Workers Service Providers. Over the course of past few months we've seen an accelerating interest in Workers. | Continue reading


@blog.cloudflare.com | 5 years ago

How we scaled Nginx and saved the world 54 years every day

10 million websites, apps and APIs use Cloudflare to give their users a speed boost. At peak we serve more than 10 million requests a second across our 151 data centers. Over the years we’ve made many modifications to our version of NGINX to handle our growth. This is blog post i … | Continue reading


@blog.cloudflare.com | 5 years ago

How we scaled Nginx and saved the world 54 years every day

10 million websites, apps and APIs use Cloudflare to give their users a speed boost. At peak we serve more than 10 million requests a second across our 151 data centers. Over the years we’ve made many modifications to our version of NGINX to handle our growth. This is blog post i … | Continue reading


@blog.cloudflare.com | 5 years ago

Minecraft API with Workers and Coffeescript

If you've ever played a video game in the past couple of years, chances are you know about Minecraft. You might be familiar with the game or even planted a tree or two, but what you might not know about is the vast number of Minecraft online communities. | Continue reading


@blog.cloudflare.com | 5 years ago

The Road to QUIC

QUIC (Quick UDP Internet Connections) is a new encrypted-by-default Internet transport protocol, that provides a number of improvements designed to accelerate HTTP traffic as well as make it more secure, with the intended goal of eventually replacing TCP and TLS on the web. | Continue reading


@blog.cloudflare.com | 5 years ago

The Road to QUIC

QUIC (Quick UDP Internet Connections) is a new encrypted-by-default Internet transport protocol, that provides a number of improvements designed to accelerate HTTP traffic as well as make it more secure, with the intended goal of eventually replacing TCP and TLS on the web. | Continue reading


@blog.cloudflare.com | 5 years ago

1.1.1.1 for Your Organization

Our fast, privacy-centric 1.1.1.1 project can secure your users on the Internet, and you’ll always know that they’ll be the first to benefit from the work of Internet standards bodies like the IETF. | Continue reading


@blog.cloudflare.com | 5 years ago

1.1.1.1 for Your Organization

Our fast, privacy-centric 1.1.1.1 project can secure your users on the Internet, and you’ll always know that they’ll be the first to benefit from the work of Internet standards bodies like the IETF. | Continue reading


@blog.cloudflare.com | 5 years ago

Cloudflare Going Proactive on Encryption Adoption

It's no secret that Cloudflare operates at a huge scale. Cloudflare provides security and performance to over 9 million websites all around the world, from small businesses and WordPress blogs to Fortune 500 companies. That means one in every 10 web requests goes through our netw … | Continue reading


@blog.cloudflare.com | 5 years ago

Cloudflare Access: Now teams of any size can turn off their VPN

Using a VPN is painful: Logging-in interrupts your workflow. You have to remember a separate set of credentials, which your administrator has to manage. If you are away from the office, the VPN slows you down. Beyond just inconvenience, a VPN can pose a real security risk. | Continue reading


@blog.cloudflare.com | 5 years ago

Going Proactive on Security: Driving Encryption Adoption Intelligently

It's no secret that Cloudflare operates at a huge scale. Cloudflare provides security and performance to over 9 million websites all around the world, from small businesses and WordPress blogs to Fortune 500 companies. That means one in every 10 web requests goes through our netw … | Continue reading


@blog.cloudflare.com | 5 years ago