L'ultima volta che ho scritto della nostra pipeline di propagazione DNS nel 2022, Zone Builder ha ricevuto circa 250 modifiche ai record DNS al secondo.
Oggi ne riceve circa 700, quasi tre volte di più, più circa 100 altri eventi, come modifiche all'impostazione delle zone.
Tuttavia, il numero degli eventi non è mai stato il vero problema.
Le altre sette chiavi erano altrettanto deboli: 56, 66, 115, 155, 156, 230 e 237.
Il giorno successivo, abbiamo scritto un post sul blog sulle azioni immediate intraprese per mitigare questa perdita e su cosa dovevano fare i clienti per rimanere al sicuro.
Oggi i servizi Cloudflare per origini private sono generalmente disponibili.
Punta un record DNS proxy su un IP privato e Cloudflare raggiunge l'origine tramite la tua connessione Cloudflare One esistente.
Prima della beta, mettere Cloudflare davanti a questi servizi significava esporre un IP pubblico, aprire una porta del firewall o eseguire cloudflared insieme all'origine.
Welcome to the 26th edition of Cloudflare's DDoS Threat Report.
This edition covers the third quarter of 2026 — July, August, and September — and returns the series to its quarterly cadence following the combined H1 2026 volume.
That works out to approximately 8,226 network-layer DDoS attacks per hour, or about 197,400 per day — one attack every 0.44 seconds.
A video player seeking to the middle of a movie asks for a few megabytes.
Under our old range caching, that one request could make Cloudflare pull 128 MiB from the origin and move it between data centers, sometimes after the viewer had already left.
Range requests are how large files get delivered, and caching them naively easily leads to wasted network bandwidth and wasted disk operations when running a CDN at scale.
Today, Cloudflare is launching a post-quantum geographically restricted key manager in support of our Data Localization Suite (DLS) in closed beta.
This new PQ GeoKey Manager is a cornerstone of Cloudflare's data sovereignty solutions, making sure that a customer s decryption keys are only accessible in their chosen geography.
GeoKey Manager implements this by wrapping each decryption key such that it can only be decrypted by Cloudflare servers that are located in the allowed geography.
For ten days, auditors appointed by the Korea Internet & Security Agency (KISA) sat together with us and worked through 80 controls.
That is what it took for a company headquartered in the United States, operating a global network serving Korean users, to be certified in South Korea.
Cloudflare has now obtained South Korea s Information Security Management System (ISMS) certification under the ISMS-P framework.