Cloudflare Stops Guessing, Makes Websites 150ms Faster

Cloudflare stopped guessing which security protocol to use, cutting connection retries from 52% to 3.7% and making websites noticeably faster.

Cloudflare has rolled out a significant performance enhancement that speeds up a large portion of the web by optimizing how it establishes secure connections. According to a report from InfoQ, the company has fundamentally changed its approach to the Transport Layer Security (TLS) handshake it performs with origin servers. The result is a dramatic reduction in connection retries, which plummeted from 52% down to just 3.7% for affected servers. This seemingly small change has a massive impact on speed, cutting over 150 milliseconds from the 90th percentile connection latency. For end-users, this translates to a faster, smoother browsing experience on millions of websites that rely on Cloudflare's infrastructure, as the initial negotiation to secure traffic now happens much more efficiently.

The core of the update lies in a shift from guessing to measuring. Previously, when Cloudflare's network needed to connect to a customer's origin server, it had to propose a specific cryptographic method for the secure handshake. It would default to a modern, efficient algorithm called X25519. However, if the origin server didn't support this specific method, it would respond with a `HelloRetryRequest`. This message essentially tells Cloudflare to try again with a different, compatible algorithm. This retry process required an entire extra round trip over the network, introducing significant latency before any actual data could be sent. The new system eliminates this guesswork. Cloudflare now actively measures and remembers the preferred TLS parameters for each origin server. By storing this information, subsequent connections can use the correct algorithm on the very first attempt, eliminating the costly retry and its associated delay.

This optimization is more than just a simple speed boost; it reflects a broader trend in building a more intelligent and adaptive internet infrastructure. It also provides a crucial foundation for the adoption of next-generation security standards, particularly post-quantum cryptography. The InfoQ report highlights that this change had a profound effect on post-quantum connections, increasing the number that complete in a single round trip from essentially zero to over 99%. This is critical because new, more complex security protocols can often introduce performance overhead, which discourages adoption. By streamlining the foundational handshake process, Cloudflare is paving the way for a smoother transition to quantum-resistant encryption without degrading the user experience. The fact that only 12.8% of origins currently support these advanced protocols underscores why removing performance barriers is essential to encouraging wider implementation across the industry.

For businesses and developers using Cloudflare, this update is an entirely passive benefit—a free performance upgrade that requires no action on their part. It serves as a powerful example of the value provided by managed infrastructure partners who continuously refine their systems at a global scale. The key takeaway for the industry is the growing importance of dynamic, measurement-based systems over static, one-size-fits-all configurations. As web technologies and server configurations become increasingly diverse, intelligent probing and adaptation are necessary to maintain optimal performance. Looking forward, we can expect to see this philosophy applied to other areas of network communication, as major providers work to make the internet not only more secure with protocols like post-quantum crypto, but also faster and more efficient by default.

For developers and infrastructure teams, this highlights how seemingly minor protocol optimizations can yield significant real-world performance gains. Cloudflare's shift from a static guess to active measurement for TLS parameters drastically reduces latency, directly impacting user experience and showing a path for smoother rollouts of future protocols.

Faster websites directly correlate with higher user engagement, better conversion rates, and improved SEO rankings. This update provides a no-cost performance boost for businesses using Cloudflare, enhancing their digital storefronts and services. It reinforces the competitive advantage gained from using advanced, actively-managed infrastructure providers.