Subscribe to receive notifications of new posts:

Internet measurement, resilience, and transparency: blog takeover from Cloudflare Research and friends

2025-10-27

Coinciding with the ACM’s Internet Measurement Conference, the Cloudflare Research team is publishing a series of posts this week to share their research on building a more measurable, resilient, and transparent Internet. These posts will cover foundational concepts in Internet measurement, Internet resilience, cryptography, and networking. ...

Continue reading »
Internet measurement, resilience, and transparency: blog takeover from Cloudflare Research and friends

State of the post-quantum Internet in 2025

2025-10-28

ResearchPost-Quantum

Today over half of human-initiated traffic with Cloudflare is protected against harvest-now/decrypt-later with post-quantum encryption. What once was a cool science project, is the new security baseline for the Internet. We’re not done yet: in this blog post we’ll take measure where we are, what we expect for the coming years, and what you can do today....

Keeping the Internet fast and secure: introducing Merkle Tree Certificates

2025-10-28

Post-QuantumResearchCryptographySecurityTLSChromeGoogleIETFTransparencyRustOpen SourceCloudflare Workers

Cloudflare is launching an experiment with Chrome to evaluate fast, scalable, and quantum-ready Merkle Tree Certificates, all without degrading performance or changing WebPKI trust relationships....

A framework for measuring Internet resilience

2025-10-28

ResearchBetter InternetRouting SecurityInsights

We present a data-driven framework to quantify cross-layer Internet resilience. We also share a list of measurements with which to quantify facets of Internet resilience for geographical areas....

Announcing Workers automatic tracing, now in open beta

2025-10-28

Cloudflare WorkersObservabilityTracingOpenTelemetry

Cloudflare Workers' support for automatic tracing is now in open beta! Export traces to any OpenTelemetry-compatible provider for deeper application observability -- no code changes required...

Online outages: Q3 2025 Internet disruption summary

2025-10-28

RadarInternet ShutdownInternet TrafficOutageConsumer ServicesInternet Trends

In Q3 2025, we observed Internet disruptions around the world resulting from government directed shutdowns, power outages, cable cuts, a cyberattack, an earthquake, a fire, and technical problems, as well as several with unexplained causes....

The tricky science of Internet measurement

2025-10-27

Research

The Internet is one big open system composed of many closed boxes — which makes measuring the Internet difficult. In this post we explore Internet measurement as a science....

From .com to .anything: introducing Top-Level Domain (TLD) insights on Cloudflare Radar

2025-10-27

ResearchRadarDNS1.1.1.1Registrar

Cloudflare Radar has launched a new Top-Level Domain (TLD) page, providing insights into TLD popularity, traffic, and security. The top-ranking TLD may come as a surprise....

Data at Cloudflare scale: some insights on measurement for 1,111 interns

2025-10-27

Research

While large cloud providers hold vast troves of passive network data, analyzing them is complicated. The scale, noise, and absence of definitive ground truth all create major hurdles. Yet by carefully quantifying these constraints and finding alternative forms of evidence, meaningful insights can still emerge....

Making the Internet observable: the evolution of Cloudflare Radar

2025-10-27

ResearchRadarAIRoutingAPI

Cloudflare Radar has evolved significantly since its 2020 launch, offering deeper insights into Internet security, routing, and traffic with new tools and data that help anyone understand what's happening online....

How does Cloudflare’s Speed Test really work?

2025-10-27

ResearchSpeed

In this blog post we’ll discuss how Cloudflare thinks about measuring Internet quality, how our own Cloudflare speed test works, and our future plans for providing Internet measurement tools that help everyone build a better Internet....

How Cloudflare’s client-side security made the npm supply chain attack a non-event

2025-10-24

Supply Chain AttacksJavaScriptMalicious JavaScriptAIDeveloper PlatformDevelopers

A recent npm supply chain attack compromised 18 popular packages. This post explains how Cloudflare’s graph-based machine learning model, which analyzes 3.5 billion scripts daily, was built to detect and block exactly this kind of threat automatically....

Securing agentic commerce: helping AI Agents transact with Visa and Mastercard

2025-10-24

DevelopersDeveloper PlatformAIAgentsAI Bots

Cloudflare is partnering with Visa and Mastercard to help secure the future of agentic commerce....

A deep dive into BPF LPM trie performance and optimization

2025-10-21

Deep DiveeBPFIPv4IPv6LinuxPerformance

This post explores the performance of BPF LPM tries, a critical data structure used for IP matching. ...

Load Balancing Monitor Groups: Multi-Service Health Checks for Resilient Applications

2025-10-17

Load Balancing

Cloudflare Load Balancing now supports Monitor Groups, allowing you to combine multiple health monitors into a single, logical assessment. ...

Improving the trustworthiness of Javascript on the Web

2025-10-16

SecurityMalicious JavaScriptJavaScriptDeep DiveCryptographyResearch

There's no way to audit a site’s client-side code as it changes, making it hard to trust sites that use cryptography. We preview a specification we co-authored that adds auditability to the web....

Unpacking Cloudflare Workers CPU Performance Benchmarks

2025-10-14

Cloudflare WorkersDeveloper PlatformDevelopers

Cloudflare investigated CPU performance benchmark results for Workers, uncovering and fixing issues in infrastructure, V8 garbage collection, and OpenNext optimizations. ...

Introducing REACT: Why We Built an Elite Incident Response Team

2025-10-09

Cloudforce OneIncident ResponseDigital ForensicsThreat Intelligence

We're launching Cloudforce One REACT, a team of expert security responders designed to eliminate the gap between perimeter defense and internal incident response....

How we found a bug in Go's arm64 compiler

2025-10-08

Deep DiveGoProgramming

84 million requests a second means even rare bugs appear often. We'll reveal how we discovered a race condition in the Go arm64 compiler and got it fixed....

Payload on Workers: a full-fledged CMS, running entirely on Cloudflare’s stack

2025-09-30

Cloudflare Workers

We demonstrate how the open-source Payload CMS was ported to run entirely on Cloudflare's developer platform....

Nationwide Internet shutdown in Afghanistan extends localized disruptions

2025-09-30

RadarInternet ShutdownInternet TrafficOutage

On September 29, 2025, Internet connectivity was completely shut down across Afghanistan, impacting business, education, finance, and government services....