In September 2025, a thread popped up in our inte al engineering chat room asking, "Which part of our stack would be responsible for sending ErrCode=ENHANCE_YOUR_CALM to an HTTP/2 client?" Two inte al microservices were experiencing a critical error preventing their communication and the team needed...

Here at Cloudflare, we’ve been celebrating Halloween with some zombie hunting of our own. The zombies we’d like to remove are those that disrupt the core framework responsible for how the Inte et routes traffic: BGP (Border Gateway Protocol).A BGP zombie is a silly name for a route that has become s...

Here at Cloudflare, we frequently use and write about data in the present. But sometimes understanding the present begins with digging into the past.  We recently lea ed of a 2024 turkmen.news article (available in Russian) that reports Turkmenistan experienced “an unprecedented easing in blocking,”...

Cloudflare Workflows is our take on "Durable Execution." They provide a serverless engine, powered by the Cloudflare Developer Platform, for building long-ru ing, multi-step applications that persist through failures. When Workflows became generally available earlier this year, they allowed develope...

In April, we shared our vision for a global virtual private cloud on Cloudflare, a way to unlock your applications from regionally constrained clouds and on-premise networks, enabling you to build truly cross-cloud applications.Today, we’re a ouncing the first milestone of our Workers VPC initiative...

Cloudflare Stream loves video. But we know not every workflow needs the full picture, and the popularity of podcasts highlights how compelling stand-alone audio can be. For developers, processing a video just to access audio is slow, costly, and complex. What makes video so expensive? A video file i...

A little over 6 years ago, we presented quiche, our open source QUIC implementation written in Rust. Today we’re a ouncing the open sourcing of tokio-quiche, our battle-tested, asynchronous QUIC library combining both quiche and the Rust Tokio async runtime. Powering Cloudflare’s Proxy B in Apple iC...

When a customer wants to bring IP address space to Cloudflare, they’ve always had to reach out to their account team to put in a request. This request would then be sent to various Cloudflare engineering teams such as addressing and network engineering — and then the team responsible for the particu...

Developers can already use Cloudflare Workflows to build long-ru ing, multi-step applications on Workers. Now, Python Workflows are here, meaning you can use your language of choice to orchestrate multi-step applications.With Workflows, you can automate a sequence of idempotent steps in your applica...

Remote bindings are bindings that co ect to a deployed resource on your Cloudflare account instead of a locally simulated resource – and recently, we a ounced that remote bindings are now generally available. With this launch, you can now co ect to deployed resources like R2 buckets and D1 databases...

How do you find the root cause of a configuration management failure when you have a peak of hundreds of changes in 15 minutes on thousands of servers?That was the challenge we faced as we built the infrastructure to reduce release delays due to failures of Salt, a configuration management tool. (We...

We have some big news to share today: Replicate, the leading platform for ru ing AI models, is joining Cloudflare.We first started talking to Replicate because we shared a lot in common beyond just a passion for bright color palettes. Our mission for Cloudflare’s Workers developer platform has been ...

One piece of advice I received early in my career was to get into a transformative industry. Those words have followed me ever since, and it’s a goal I’ve encouraged many others to pursue.For me, it meant first launching into biotechnology where I lea ed my passion for working with deeply technical ...

Mode web applications are complex, often loading JavaScript libraries from tens of different sources and submitting data to just as many. This leads to a vast attack surface area and many attack types that hackers may leverage to target the user browser directly. Magecart, a category of supply chain...

Rate Limiting rules are essential in the toolbox of security professionals as they are very effective in managing targeted volumetric attacks, takeover attempts, scraping bots, or API abuse. Over the years we have received a lot of feature requests from users, but two stand out: suggesting rate limi...

Almost three years ago, we launched Cloudflare Waiting Room to protect our customers’ sites from overwhelming spikes in legitimate traffic that could bring down their sites. Waiting Room gives customers control over user experience even in times of high traffic by placing excess traffic in a customi...

We are excited to a ounce an extended partnership between CrowdStrike and Cloudflare to bring together Cloudflare Email Security and CrowdStrike Falcon® LogScale. With this integration, joint customers who have both Falcon LogScale and Cloudflare Email Security can now send detection data to be inge...

I recently switched from CentOS to Ubuntu and my backups are now showing this wa ing. gzip: wa ing: GZIP environment variable is deprecated; use an alias or script Everything I've found so far says to use tar instead of gzip in the command line. However, all of this is automated in WHM for me. I hav...

When installing cPanel, it's recommended to include an FQDN as the hostname to avoid using the cprapid domain. After setting my hostname (as an example, host.example.tld) and ru ing the installation script, I receive successful output which includes instructions to navigate to the WHM panel in the b...

Hi, When a client cleans a large email account, the doveadm expunge process consumes a lot of resources (specially CPU): Is there any way to reduce the priority (nice) of this process? I've tried these Tweak settings with no luck (nice stays at 0): Thanks, Ignacio