MORE POSTS
May 25, 2022
How we improved DNS record build speed by more than 4,000x
How we redesigned our DNS pipeline to significantly improve DNS propagation speed across all zones....
May 03, 2022
Wildcard proxy for everyone
Today we’re announcing the availability of proxied wildcard DNS records on all plan levels...
March 08, 2022
Announcing experimental DDR in 1.1.1.1
The majority of DNS queries on the Internet today are unencrypted. This post describes a new protocol, called Discovery of Designated Resolvers (DDR), that allows clients to upgrade from unencrypted DNS to encrypted DNS when only the IP address of a resolver is known. ...
December 08, 2021
Announcing Foundation DNS — Cloudflare’s new premium DNS offering
Today we’re launching Foundation DNS — our new premium DNS offering! Leverage Cloudflare DNS and ensure your domain is always globally available within milliseconds....
November 13, 2021
Cloudflare blocks an almost 2 Tbps multi-vector DDoS attack
Earlier this week, Cloudflare automatically detected and mitigated a DDoS attack that peaked just below 2 Tbps — the largest we’ve seen to date....
November 12, 2021
Five Great (free!) Ways to Get Started With Cloudflare
New to Cloudflare and don’t know where to begin? Here are five things you can do to get started with Cloudflare right now......
October 08, 2021
What happened on the Internet during the Facebook outage
Today, we're going to show you how the Facebook and affiliate sites downtime affected us, and what we can see in our data....
October 04, 2021
Understanding how Facebook disappeared from the Internet
Today at 1651 UTC, we opened an internal incident entitled "Facebook DNS lookup returning SERVFAIL" because we were worried that something was wrong with our DNS resolver 1.1.1.1. But as we were about to post on our public status page we realized something else more serious was ...
September 27, 2021
Tackling Email Spoofing and Phishing
Today we’re announcing a new tool to tackle email spoofing and phishing. We’ll warn users about insecure configurations and provide an easy-to-use wizard to create required DNS records....
March 20, 2021
Moving k8s communication to gRPC
How we use gRPC in combination with Kubernetes to improve the performance and usability of internal APIs....
March 08, 2021
The benefits of serving stale DNS entries when using Consul
We use Consul for service discovery, and we’ve deployed a cluster that spans several of our data centers. We were aware from the start that the DNS query latencies were not great from certain parts of the world that were furthest away from these data centers....
December 08, 2020
Helping build the next generation of privacy-preserving protocols
Today, we’re making several announcements around improving Internet protocols with respect to something important to our customers and Internet users worldwide: privacy....
December 08, 2020
Improving DNS Privacy with Oblivious DoH in 1.1.1.1
Oblivious DoH (ODoH) makes secure DNS over HTTPS (DoH) queries into private queries which prevent the leakage of client IP addresses to resolvers. The new proposed ODoH standard addresses this problem and today we are enabling users to use this protocol with 1.1.1.1...
December 08, 2020
Good-bye ESNI, hello ECH!
A deep dive into the Encrypted Client Hello, a standard that encrypts privacy-sensitive parameters sent by the client, as part of the TLS handshake....