123 posts
Your AI bill is out of control. Cloudflare can fix it now. 2026-06-05 Ming Lu Kenny Johnson There isn't a CIO on the planet not worried about AI spend right now. CFOs are increasingly nervous, too. For fear of falling behind, many companies have pushed their employees to use AI…
VoidZero is joining Cloudflare 2026-06-04 Evan You Steve Faulkner VoidZero, the company behind Vite, Vitest, Rolldown, Oxc, and Vite+, is joining Cloudflare. As part of this change, all team members of VoidZero are joining Cloudflare, too. Before saying anything else, we want to…
Enforcing the First AS in BGP AS_PATHs 2026-06-03 Bryton Herdes Bryce Walters Mingwei Zhang Some recent route hijacks reported by Spamhaus captured our attention. In many of these hijack attempts, an apparent bad actor took advantage of unused autonomous system numbers, or ASNs.…
How we reduced core unit boot time from hours to minutes 2026-06-01 Giovanni Pereira Zantedeschi Nnamdi Ajah Omar Sheik-Omar Cloudflare's core is the centralized data centers that run our control plane, billing, and analytics -- distinct from the globally distributed edge that h…
How we built Cloudflare's data platform and an AI agent on top of it 2026-05-28 Brian Brunner Dmitry Alexeenko Matt Moen Cloudflare processes more than a billion events every second. Our network spans 330+ cities in 120+ countries. Behind every HTTP request, every Worker invocat…
Iran's Internet is partially restored, Cloudflare Radar data shows 2026-05-27 Lai Yi Ohlsen Sabina Zejnilovic On Tuesday, May 26, Iran’s vice president announced that Internet access had started to be restored in the country after being cut off almost three months ago, following…
Announcing Claude Compliance API support with Cloudflare CASB 2026-05-21 Abe Carryl Today, we are extending Cloudflare’s cloud access security broker (CASB) to support the Claude Compliance API. Security and compliance teams can now monitor Claude usage directly in the Cloudflar…
Announcing Claude Managed Agents on Cloudflare 2026-05-19 Mike Nomitch Cloudflare and Anthropic have collaborated to integrate Claude Managed Agents with Cloudflare Sandboxes. Our new integration gives you more control over your agent sandboxes, secures connections to private se…
Project Glasswing: what Mythos showed us 2026-05-18 Grant Bourzikas For the last few months, we've been testing a range of security-focused LLMs on our own infrastructure. These LLMs help identify potential vulnerabilities in our own systems, so we can fix them – and they also s…
Our billing pipeline was suddenly slow. The culprit was a hidden bottleneck in ClickHouse 2026-05-14 James Morrison Christian Endres At Cloudflare, we are heavy users of ClickHouse, an open-source analytical database management system. We redesigned one of our largest ClickHouse…
Browser Run: now running on Cloudflare Containers, it’s faster and more scalable 2026-05-13 Ruskin Constant Rui Figueira Sofia Cardita We’ve enabled higher usage limits, faster performance, and better reliability for Browser Run by rebuilding on top of Cloudflare’s Containers. Y…
When "idle" isn't idle: how a Linux kernel optimization became a QUIC bug 2026-05-12 Esteban Carisimo Antonio Vicente CUBIC, standardized in RFC 9438, is the default congestion controller in Linux, and as a result governs how most TCP and QUIC connections on the public Internet…
Building for the future 2026-05-07 Matthew Prince Michelle Zatlyn This afternoon, we sent the following email to our global team. One of our core values at Cloudflare is transparency, and we believe it's important that you hear this directly from us because it’s a major moment a…
How Cloudflare responded to the “Copy Fail” Linux vulnerability 2026-05-07 Chris J Arges Sourov Zaman Rian Islam On April 29, 2026, a Linux kernel local privilege escalation vulnerability was publicly disclosed under the name "Copy Fail" (CVE-2026-31431). Cloudflare’s Security a…
When DNSSEC goes wrong: how we responded to the .de TLD outage 2026-05-06 Sebastiaan Neuteboom Christian Elmerot Max Worsley On May 5, 2026, at roughly 19:30 UTC, DENIC, the registry operator for the .de country-code top-level domain (TLD), started publishing incorrect DNSSEC si…