Why Replicate is joining Cloudflare
2025-12-01
Today, we’re excited to announce that Replicate is officially part of Cloudflare. We wanted to share a bit about our journey and why we made this decision. ...
Continue reading »
Partnering with Black Forest Labs to bring FLUX.2 [dev] to Workers AI
2025-11-25
FLUX.2 [dev] by Black Forest Labs is now on Workers AI! This advanced open-weight image model offers superior photorealism, multi-reference inputs, and granular control with JSON prompting....
Get better visibility for the WAF with payload logging
2025-11-24
The WAF provides ways for our customers to gain insight into why it takes certain actions. The more granular and precise the insight, the more reproducible and understandable it is. Revamped payload logging is one such method. ...
Cloudflare outage on November 18, 2025
2025-11-18
Cloudflare suffered a service outage on November 18, 2025. The outage was triggered by a bug in generation logic for a Bot Management feature file causing many Cloudflare services to be affected. ...
Replicate is joining Cloudflare
2025-11-17
Bringing Replicate’s tools into Cloudflare will continue to make our Workers Platform the best place on the Internet to build and deploy any AI or agentic workflow. ...
Finding the grain of sand in a heap of Salt
2025-11-13
We explore the fundamentals of Saltstack and how we use it at Cloudflare. We also explain how we built the infrastructure to reduce release delays due to Salt failures on the edge by over 5%. ...
Connecting to production: the architecture of remote bindings
2025-11-12
Remote bindings allow you to connect your local Worker code to deployed Cloudflare resources like R2 and D1. Come along on the technical journey of how we built this feature to create a seamless local development experience....
A closer look at Python Workflows, now in beta
2025-11-10
Cloudflare Workflows, our durable execution engine for running multi-step applications, now supports Python. That means less friction, more possibilities, and another reason to build on Cloudflare....
DIY BYOIP: a new way to Bring Your Own IP prefixes to Cloudflare
2025-11-07
Announcing a new self-serve API for Bring Your Own IP (BYOIP), giving customers unprecedented control and flexibility to onboard, manage, and use their own IP prefixes with Cloudflare's services....
Async QUIC and HTTP/3 made easy: tokio-quiche is now open-source
2025-11-06
We’re excited to announce the open sourcing of tokio-quiche, our async QUIC library built on quiche and tokio. Relied upon in our services such as iCloud Private Relay and our next-generation Oxy-based proxies, tokio-quiche handles millions of HTTP/3 requests per second with low latency and high throughput. ...
Extract audio from your videos with Cloudflare Stream
2025-11-06
Cloudflare Stream provides a unified platform for video storage, encoding, and delivery. We are now enabling developers to seamlessly extract audio from videos....
How Workers VPC Services connects to your regional private networks from anywhere in the world
2025-11-05
Workers VPC Services enter open beta today. We look under the hood to see how Workers VPC connects your globally-deployed Workers to your regional private networks by using Cloudflare's global network, while abstracting cross-cloud networking complexity....
Building a better testing experience for Workflows, our durable execution engine for multi-step applications
2025-11-04
End-to-end testing for Cloudflare Workflows was challenging. We're introducing first-class support for Workflows in cloudflare:test, enabling full introspection, mocking, and isolated, reliable tests for your most complex applications....
Fresh insights from old data: corroborating reports of Turkmenistan IP unblocking and firewall testing
2025-11-03
Cloudflare used historical data to investigate reports of potential new firewall tests in Turkmenistan. Shifts in TCP resets/timeouts across ASNs corroborate large-scale network control system changes. ...
BGP zombies and excessive path hunting
2025-10-31
A BGP “zombie” is essentially a route that has become stuck in the Default-Free Zone (DFZ) of the Internet, potentially due to a missed or lost prefix withdrawal. We’ll walk through some situations where BGP zombies are more likely to rise from the dead and wreak havoc. ...
Go and enhance your calm: demolishing an HTTP/2 interop problem
2025-10-31
HTTP/2 implementations often respond to suspected attacks by closing the connection with an ENHANCE_YOUR_CALM error code. Learn how a common pattern of using Go's HTTP/2 client can lead to unintended errors and the solution to avoiding them....
Beyond IP lists: a registry format for bots and agents
2025-10-30
We propose an open registry format for Web Bot Auth to move beyond IP-based identity. This allows any origin to discover and verify cryptographic keys for bots, fostering a decentralized and more trustworthy ecosystem....
Anonymous credentials: rate-limiting bots and agents without compromising privacy
2025-10-30
As AI agents change how the Internet is used, they create a challenge for security. We explore how Anonymous Credentials can rate limit agent traffic and block abuse without tracking users or compromising their privacy....
Policy, privacy and post-quantum: anonymous credentials for everyone
2025-10-30
The world is adopting anonymous credentials for digital privacy, but these systems are vulnerable to quantum computers. This post explores the cryptographic challenges and promising research paths toward building new, quantum-resistant credentials from the ground up....
Measuring characteristics of TCP connections at Internet scale
2025-10-29
Researchers and practitioners have been studying connections almost as long as the Internet that supports them. Today, Cloudflare’s global network receives millions of connections per second. We explore various characteristics of TCP connections, including lifetimes, sizes, and more....
