Raking the floods: How to protect UDP services from DoS attacks with eBPF
18 hours ago, cloudflare

SYN-cookies help mitigating SYN-floods for TCP, but how can we protect services from similar attacks that use UDP? We designed an algorithm and a library to fill this gap, and it’s open source!...

Raking the floods: my intern project using eBPF
18 hours ago, cloudflare

SYN-cookies help mitigating SYN-floods for TCP, but how can we protect services from similar attacks that use UDP? We designed an algorithm and a library to fill this gap, and it’s open source!...

Cloudflare’s Always Online and the Internet Archive Team Up to Fight Origin Errors
1 day ago, cloudflare

Today is exciting for all those who want the Internet to be stronger, more resilient, and have important redundancies: Cloudflare is pleased to announce a partnership with the Internet Archive to bring new functionality to our Always Online service....

Moobot vs. Gatebot: Cloudflare Automatically Blocks Botnet DDoS Attack Topping At 654 Gbps
2 days ago, cloudflare

On July 3, Cloudflare’s global DDoS protection system, Gatebot, automatically detected and mitigated a UDP-based DDoS attack that peaked at 654 Gbps. The attack was part of a ten-day multi-vector DDoS campaign targeting a Magic Transit customer and was mitigated without any human intervention....

Secondary DNS - Deep Dive
3 days ago, cloudflare

The goal of Cloudflare operated Secondary DNS is to allow our customers with custom DNS solutions, be it on-premise or some other DNS provider, to be able to take advantage of Cloudflare's DNS performance and more recently, through Secondary Override, our proxying and security capabilities too....

What Happens When The Whole World Goes Remote? Not To Worry, We Were Built For This
4 days ago, cloudflare

Monday Mornings with Customer Success: A monthly series brought to you by our Customer Success Team. This month's post is all about how a telemedicine provider used Cloudflare to stay connected when the world went remote....

Add Watermarks to your Cloudflare Stream Video Uploads
1 week ago, cloudflare

The Watermark API lets you add a watermark to a video at the time of uploading. It consists of two new features to the Stream API....

Migrating cdnjs to serverless with Workers KV
1 week ago, cloudflare

Cloudflare powers cdnjs, an open-source project that delivers popular JavaScript libraries to over 11% of websites. Today, we are excited to announce its migration to a serverless infrastructure using Cloudflare Workers and its distributed key-value store Workers KV!...

Unimog - Cloudflare’s edge load balancer
1 week ago, cloudflare

Unimog is the Layer 4 Load Balancer for Cloudflare’s edge data centers. This post explains the problems it solves and how it works....

Rendering React on the Edge with Flareact and Cloudflare Workers
2 weeks ago, cloudflare

Page speed is critical. You need to get content to your audience as quickly as possible on every device. You also need to render ads in a speedy way to maintain a good user experience and make money to support your journalism....

Two clicks to add region-based Zero Trust compliance
2 weeks ago, cloudflare

Starting today, you can make geography-based compliance easy again in Cloudflare Access with just two clicks. You can now build rules that require employees to connect from certain countries. You can also add rules that block team members from connecting from other countries....

Analysis of Today's CenturyLink/Level(3) Outage
2 weeks ago, cloudflare

Today CenturyLink/Level(3), a major ISP and Internet bandwidth provider, experienced a significant outage that impacted some of Cloudflare’s customers as well as a significant number of other services and providers across the Internet....

August 30th 2020: Analysis of CenturyLink/Level(3) Outage
2 weeks ago, cloudflare

Today CenturyLink/Level(3), a major ISP and Internet bandwidth provider, experienced a significant outage that impacted some of Cloudflare’s customers as well as a significant number of other services and providers across the Internet....

Asynchronous HTMLRewriter for Cloudflare Workers
3 weeks ago, cloudflare

HTMLRewriter for Cloudflare Workers now supports asynchronous handlers, allowing developers to prefetch assets or user-specific content from a remote service....

How Argo Tunnel engineering uses Argo Tunnel
3 weeks ago, cloudflare

Argo Tunnel provides remote access to development environments by creating secure outbound-only connections to Cloudflare’s edge network from a resource exposing it to the Internet. That model helps protect servers and resources from being vulnerable to attack by an exposed IP address....

Cloudflare and Human Rights: Joining the Global Network Initiative (GNI)
3 weeks ago, cloudflare

We are excited to announce that we have joined the Global Network Initiative (GNI), one of the world's leading human rights organizations in the information and communications Technology (ICT) sector, as observers....

Announcing wrangler dev — the Edge on localhost
3 weeks ago, cloudflare

A few weeks ago we announced a release candidate for wrangler dev — today, we're excited to take wrangler dev, the world’s first edge-based development environment, to GA with the release of wrangler 1.11....

Improving the Wrangler Startup Experience
3 weeks ago, cloudflare

You can now write any behaviour on requests heading to your site or even run fully fledged applications directly on the edge. Wrangler is the open-source CLI tool used to manage your Workers and has a big focus on enabling a smooth developer experience....

Delivering HTTP/2 upload speed improvements
3 weeks ago, cloudflare

Cloudflare recently shipped improved upload speeds across our network for clients using HTTP/2. This post describes our journey from troubleshooting an issue to fixing it and delivering faster upload speeds to the global Internet....

How Cloudflare uses Cloudflare Spectrum: A look into an intern’s project at Cloudflare
4 weeks ago, cloudflare

As part of my onboarding as an intern on the Spectrum (a layer 4 reverse proxy) team, I learned that many internal services dogfood Spectrum, as they are exposed to the Internet and benefit from layer 4 DDoS protection....

Next