Cloudflare
Latest Cloudflare news, announcements & analysis
AI
Cloudflare Now Picks the Cheapest AI Model For You
Cloudflare's new Auto Router automatically selects the best AI model for each task to cut costs. Their benchmark shows it can achieve nearly the same results as top models for one-third the price.
Neeraj Dhiman ·
Infra
How Cloudflare Freed 100 Terabytes of RAM With One Tweak
Cloudflare reclaimed over 100 terabytes of RAM across its network by optimizing a core load-balancing technique. The change significantly cut memory usage by making its consistent hashing algorithm more efficient, reducing costs and improving performance.
Ashish Kale ·
Infra
Find Your App's Slow Spots in Production
Cloudflare has launched on-demand CPU and memory profiling for its Workers platform. This lets developers find and fix performance bottlenecks directly in their live production applications, without needing to replicate issues in a test environment.
Ashish Kale ·
Infra
Cloudflare Now Blocks Misbehaving Verified Bots
Cloudflare will now monitor and potentially block verified bots that misbehave. This new 'continuous accountability' protects sites from good bots that are misconfigured, ignore rules, or overwhelm servers, adding a new layer of protection beyond simple identification.
Ashish Kale ·
Infra
A New Tool Aims to Unify JavaScript Development
The new JavaScript toolchain Vite+ has reached its stable 1.0 release. Backed by Cloudflare, it aims to simplify complex development workflows by managing Node.js, packages, and frontend tasks from a single configuration file.
Ashish Kale ·
Infra
Cloudflare's New Privacy Tool Blocks Its Own Traffic
Cloudflare launched a new privacy gateway using Oblivious HTTP. Its key feature is a built-in rule that prevents it from decrypting its own traffic, architecturally guaranteeing that user identity and request data remain separate.
Ashish Kale ·
Infra
Cloudflare Now Filters and Redacts Logs Natively
Cloudflare's new Transformers feature lets you filter and redact sensitive data from logs before they are exported. This removes the need for separate processing tools, simplifying data pipelines and improving security for developers and IT teams.
Ashish Kale ·
Infra
Cloudflare K2 Promises One-Second Event Streaming
Cloudflare has launched K2, a new serverless event streaming service built on its R2 object storage. The service aims for one-second latency, though early tests show higher numbers, and its pricing matches data production with consumption.
Ashish Kale ·
AI
Cloudflare Is Using AI to Hack Its Own Defenses
Cloudflare is using advanced AI models to invent new cyberattacks against its own Web Application Firewall. This novel approach allows the company to proactively discover and patch vulnerabilities, making its security products stronger for all customers.
Neeraj Dhiman ·
Infra
Cloudflare's Plan for a Post-Quantum, AI-Powered Internet
Cloudflare unveiled a suite of major upgrades for security, AI development, and post-quantum cryptography. The changes aim to modernize the internet's core infrastructure for an era dominated by automated traffic and new threats.
Ashish Kale ·
Infra
Cloudflare Ends Global Data Delays for Developers
Cloudflare launched Workers KV Instant, a new mode for its edge data store. It pushes data changes globally in seconds, eliminating the propagation delays that previously forced developers to wait for updates to become available worldwide.
Ashish Kale ·
Infra
Cloudflare Wants to Simplify How You Build AI Search
Cloudflare has made its AI Search tool generally available. It offers a fully managed pipeline for developers to build sophisticated, multimodal search features without needing to manage complex vector database infrastructure.
Ashish Kale ·
Infra
Cloudflare Adds a Key Tool to Tame Caching
Cloudflare has added native support for the HTTP Vary header. This gives developers more control over how content is cached, helping to reduce server load and prevent inefficient cache usage known as "cache thrashing."
Ashish Kale ·
Infra
Why Cloudflare Built Its Own CMS to Replace WordPress
Cloudflare has replaced WordPress for its main blog, migrating to a new open-source system it built in-house. The new platform, EmDash, is designed for extreme performance and can handle up to 7,000 requests per second.
Ashish Kale ·
Infra
How Cloudflare Freed 100 Terabytes of Memory
Cloudflare rewrote its DNS cache in Rust, freeing up 100 terabytes of memory across its network. The change also boosted performance, cutting lookup times by 19% and allowing for a larger cache without new hardware.
Ashish Kale ·
Infra
Cloudflare Stops Guessing, Makes Websites 150ms Faster
Cloudflare has improved how it connects to websites, cutting connection retries from 52% to just 3.7%. This simple change reduces loading times by over 150 milliseconds for many sites, making a large portion of the web faster.
Ashish Kale ·
Infra
Cloudflare Now Lets Developers Offer Optional Permissions
Cloudflare now lets developers designate certain app permissions as optional. This means users can decline non-critical requests without breaking the login process, giving them more control and reducing unnecessary data access for applications.
Ashish Kale ·
Infra
Cloudflare Workers Are No Longer Just for HTTP
Cloudflare Workers can now accept raw TCP connections, ending an eight-year limitation to just HTTP. This major update unlocks new, non-web use cases like gRPC, IoT, and gaming servers on Cloudflare's global edge network.
Ashish Kale ·
Infra
Cloudflare Gives Good Bots a Way to Identify Themselves
Cloudflare has launched a new self-service portal for bot operators to register their bots. This makes Cloudflare's bot directory more accurate, helping website owners better distinguish between helpful automated traffic and malicious activity.
Ashish Kale ·
Infra
Cloudflare Built a Lightweight Browser for Automation
Cloudflare has launched Kitesurf, a lightweight browser engine designed for automated tasks. It runs on serverless Workers, making it far more efficient for tools like Playwright and Puppeteer than running a full version of Chrome.
Ashish Kale ·
Infra
Cloudflare Reinvents CI/CD with Durable TypeScript
Cloudflare released a new tool for defining CI/CD pipelines in TypeScript. It uses serverless workflows to make each step durable, allowing for automatic retries and replays to create more resilient software build processes.
Ashish Kale ·
Infra
Cloudflare May Be Adding Code to Your Website
Cloudflare is reportedly adding its analytics script to websites automatically when users switch to its nameservers. This happens without explicit consent, raising concerns about transparency and site control for developers.
Ashish Kale ·
Infra
Your Cloudflare AI Traces May Be Incomplete
Cloudflare now offers agent tracing to help developers debug AI on its Workers platform. However, the company warns that traces are not lossless, data can be truncated, and the feature will become a paid service in 2026.
Ashish Kale ·
Infra
Cloudflare Now Lets You Override Server Cache Settings
Cloudflare's new Cache Response Rules let you control caching *after* your server responds. This gives developers powerful, fine-grained control to optimize performance and reduce origin server load, all from the Cloudflare dashboard.
Ashish Kale ·
Infra
Cloudflare Wants to Teach AI to Use Websites
Cloudflare is testing a new protocol, WebMCP, that lets AI agents interact with websites through a structured interface instead of scraping. Activated with a single switch, it aims to standardize how AI navigates the web.
Ashish Kale ·
Infra
Cloudflare Built a New Browser Just for AI
Cloudflare launched Kitesurf, a cloud-hosted browser built specifically for AI agents, not people. It uses less computing power than standard browsers, making it cheaper and more efficient for developers to build and run automated tasks.
Ashish Kale ·
Infra
Cloudflare Protects Servers From Future Quantum Threats
Cloudflare has enabled post-quantum authentication for connections to origin servers. This move protects user data against future 'harvest-now, decrypt-later' attacks, where encrypted traffic is stored today to be broken by quantum computers later.
Ashish Kale ·
Infra
Cloudflare Fixed a Bug That Stalled New Connections
Cloudflare discovered a subtle bug in its open-source QUIC code that failed to handle heavy packet loss at the start of a connection. The fix improves network reliability for services using their modern protocol implementation.
Ashish Kale ·
Infra
Cloudflare Tool Migrates Security Setups in Hours
Cloudflare has released a new open-source tool to help companies move to its Zero Trust security platform. It includes automated logic to migrate from competitors like Zscaler and Palo Alto Networks, cutting migration times from months to hours.
Ashish Kale ·
Infra
Cloudflare Replaces API Tokens with Secure Logins
Cloudflare now lets all developers use OAuth for third-party app integrations. This offers a more secure alternative to traditional API tokens, giving users granular control over what data and actions an application can access.
Ashish Kale ·
Infra
Cloudflare and Browsers Are Killing the CAPTCHA
Cloudflare is working with all major web browsers, including Chrome and Firefox, to create a new protocol called PACT. It aims to prove you're human without needing to solve annoying CAPTCHAs, using an anonymous token.
Ashish Kale ·
AI
Cloudflare Built an AI Team to Find Code Flaws
Cloudflare has detailed its new system that uses multiple AI models working together to find security vulnerabilities. This multi-agent approach offers a powerful blueprint for companies looking to automate and improve their own code security.
Neeraj Dhiman ·
AI
Cloudflare Adds Support for Claude Agents
Cloudflare has integrated support for Claude Managed Agents, allowing developers to build, deploy, and manage AI agents directly on its global network. This enables connecting agents to private systems, choosing runtime environments, and using Cloudflare's tools for monitoring and management.
Neeraj Dhiman ·
Security
Critical HTTP/2 Flaw Affects Servers
A new remote denial-of-service vulnerability, named HTTP/2 Bomb, affects major web servers including NGINX, Apache, Microsoft IIS, Envoy, and Cloudflare. The flaw exists in the default HTTP/2 configuration of these servers, making them susceptible to attack without any special setup, according to researchers.
Neeraj Dhiman ·
Security
Ghost CMS Flaw Hijacks Websites
A critical vulnerability in the Ghost CMS is being actively exploited to hijack over 700 websites. Attackers inject a fake Cloudflare verification page, tricking visitors into running a malicious Windows command. This social engineering tactic, dubbed "ClickFix," ultimately installs malware onto the user's system.
Neeraj Dhiman ·
Infra
Cloudflare Now Automates Defenses Against Live Threats
Cloudflare has launched a new feature that automatically converts its real-time threat intelligence into active security rules. This helps teams proactively block emerging attacks without manual intervention, saving time and improving security posture.
Ashish Kale ·
Data
How Cloudflare Fixed a Critical Database Bottleneck
Cloudflare traced a major billing system slowdown to a bottleneck in its ClickHouse database. The team fixed it by changing a single lock type, offering a key performance lesson for anyone running large-scale data systems.
Taranpreet Singh ·
AI
Cloudflare Tests AI for Code Security
Cloudflare tested Anthropic's security-focused AI model, Mythos Preview, on its own infrastructure. As part of Project Glasswing, they used the model to scan over fifty internal code repositories to identify potential vulnerabilities and understand how attackers might leverage similar advanced AI tools in the future.
Neeraj Dhiman ·