科技 · Section
Cloudflare Blog
Cloudflare 官方技术文章与产品动态
- Localizing compliance at scale: achieving South Korea’s ISMS certificationFor ten days, auditors appointed by the Korea Internet & Security Agency (KISA) sat together with us and worked through 80 controls. That is what it took for a company headquartered in the United States, operating a global network serving K
Cloudflare Blog - Introducing full transaction detection for Cloudflare WAFToday, we are expanding our web application firewall (WAF) by adding two new capabilities: full transaction detections and response rules. Full transaction detections evaluate each HTTP request alongside its response to identify evidence of
Cloudflare Blog - Cloudflare deploys protections against php2shell vulnerabilityToday, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell . The vulnerabilities affect all web servers running PHP 5.4 or later and they may allow
Cloudflare Blog - How Commerce.com and Cloudflare are getting storefronts ready for AI agentsAI can write code and pass the bar exam, but it still struggles to buy a pair of shoes online. That’s because websites were built for humans, not agents. Most agents that shop for someone today work from a site’s HTML — they look at the pag
Cloudflare Blog - 8 eMudhra certificates are compromised. Here's what you need to knowOn October 19, 2026, at approximately 17:00 UTC, Cloudflare became aware that private keys associated with eight eMudhra intermediate certificates were compromised. These certificates were widely trusted by browsers, operating systems, and
Cloudflare Blog - Introducing tsrs: A port of TypeScript to RustCloudflare and VoidZero are now working with Max Schwenk of Owner.com on tsrs , a Rust port of the TypeScript compiler. We are doing this work in close collaboration with the TypeScript team, and incubating tsrs as part of the Oxc JavaScrip
Cloudflare Blog - Cutting our inference bill by 68% by being obsessive about optimizationWhen we previously blogged about our AI code reviewer in April , an average review cost a palatable $1.19. By the end of August, that figure had shot up to about $2.46. We hadn't made any significant architectural changes: the coordinator w
Cloudflare Blog - Introducing Clairic, a new System One class of extraction modelsToday, we're announcing a preview of a new class of System One-style models: extraction models. Our first one, Clairic, is available hosted on Workers AI as @cf/cloudflare/clairic. We intend to release the model open-weights soon. Clairic i
Cloudflare Blog - Beyond the patch: Protecting your NetScaler gateway against future vulnerabilitiesThe recent disclosure of a major vulnerability in Citrix NetScaler pointed to a widespread weak point: a login page is an attack surface that can be used to compromise and access an application server. Indeed, the disclosures included an ac
Cloudflare Blog - Continuous accountability for Verified botsA driver’s license tells you who someone is and that they passed a driving test, not whether they’ll drive responsibly in the future. The same is true for bots: verifying who operates it creates accountability, but trust depends on what it
Cloudflare Blog - A fully programmable secure web gatewayEvery secure web gateway on the market works the same way: traffic matches a condition. A terminal action fires. Allow, Block, Isolate, Log. This model has been the foundation of network security for nearly 30 years, and it handles the comm
Cloudflare Blog - Deploy with VoidVoidZero's tools such as Vite, Vitest, Oxc, and Rolldown — bundled in one toolchain as Vite+ — have made frontend development faster, but building full-stack applications requires more than just a tooling stack. These applications need serv
Cloudflare Blog - Cloudflare and OpenAI: Making AI discovery better for everyoneOptimizing your site for AI is of little use if AI can't find it. The answer to someone's question may already be on your website: the installation guide you spent a week writing, or a first-hand account of using a product, with the details
Cloudflare Blog - Yandex outage: Data shows that instead of going dark, malicious bots went on the moveFollowing reported strikes on Yandex data centers, claims circulated on the Internet that Russian bot farms and influence operations had been knocked offline. HTTP traffic charts showed steep drops, fueling speculation that the infrastructu
Cloudflare Blog - Inside Hyperdrive: How we solved a rare Hyperdrive MySQL caching bugHyperdrive support for MySQL is now generally available (GA). Hyperdrive , Cloudflare’s database connection pooler for Workers, initially only supported Postgres. Since we announced the beta for MySQL protocol support last year, we have bee
Cloudflare Blog - Under the hood, off the hot path: How D1 scales to millions of databasesTraditional database architecture assumes you have one or two big database clusters per application, usually accompanied by a connection pooling solution. AI-assisted development and vibe coding platforms turn this model inside out and are
Cloudflare Blog - Rewinding the exponential: How we keep hardware usage downMore than 20% of the web sits behind Cloudflare’s network, and our team, the Data team, owns the data pipeline responsible for plumbing that data (and more) from our global network to applicable central data centers. The Cloudflare network
Cloudflare Blog - Filter, reshape, and redact logs before export with TransformersLogpush delivers logs in batches as quickly as possible, enabling Cloudflare to provide information almost in real time. During our recent Birthday Week , we made Logpush available on all self-serve plans and Transformers generally availabl
Cloudflare Blog - Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flashFollowing last week’s release of Clef and Clef-flash , Cloudflare’s open-weight decision models, we decided to bring forth more gifts. Today, we’re releasing Clef-omni, which takes in audio and video input alongside text and image. We also
Cloudflare Blog - Introducing on-demand CPU and memory profiling with flamegraphs for Workers and Durable ObjectsUnderstanding why an application is using more resources than expected, whether that is CPU or memory, can be challenging. Logs and aggregate metrics can only get you so far. Thankfully there is a better way: CPU or memory profiling can sho
Cloudflare Blog - Deno is joining CloudflareThe Deno team is joining Cloudflare to radically simplify self-hosting Workers and Durable Objects so developers can use the same primitives in more places. For what this means and how it came about, here’s the story from Ryan Dahl and Kent
Cloudflare Blog - Bridging technical depth and usability: The story behind Radar’s redesignRadar provides a real-time view into global Internet trends, powered by Cloudflare’s global network. We support Cloudflare’s mission to help build a better Internet by making web data visible, clear, and actionable for everyone. Since launc
Cloudflare Blog - Building an evidence-grounded agentic security operations harness on CloudflareSecurity alerts rarely arrive one at a time. A single alert can cause a spike across the environment, requiring a human analyst to decide which alerts are related and what they mean. When multiple arrive at the same time, it can quickly ove
Cloudflare Blog - The keys to the Internet change on October 11. Are you ready?On October 11, 2026, the DNS root is scheduled to change its key-signing key (KSK) for only the second time ever. This key anchors DNSSEC’s chain of trust, which lets DNS resolvers authenticate answers using cryptographic signatures. The ch
Cloudflare Blog - Everything we launched during Birthday Week 2026We celebrated our 16th birthday last week by sharing how we’re building a better Internet for today’s world. As Matthew and Michelle reflected in this year’s Founders’ Letter , this year saw some of the most consequential changes in the his
Cloudflare Blog - One year later: the power of 1.1.1.1 internsA year ago, many companies were cutting intern and new-graduate hiring . We went the other way. We announced a goal to hire as many as 1,111 interns in 2026, a number that’s a nod to 1.1.1.1, our public DNS resolver. The bet was that AI mak
Cloudflare Blog - 8 major updates to Cloudflare ObservabilityToday, we’re launching eight major updates that bring your logs, traces, analytics, alerts, dashboards, and exporting into one observability platform , with simpler and more predictable pricing. Here's what's launching: One place to explore
Cloudflare Blog - Streamline: custom video pipelines with Cloudflare Stream and WorkersCloudflare Stream is a powerful broadcasting platform that, for many of our customers, just works. But what if you wanted to render dynamic annotations on a livestream or create an alternate version of a hosted video with burned-in subtitle
Cloudflare Blog - Introducing Web Search API via AI GatewayFun fact: when you use an agent and it needs to fetch a live web page, the agent usually just guesses the URL of the page and then makes a tool call to curl it. This is why you’ll sometimes see web fetches come back with a 404 Not Found, wh
Cloudflare Blog - Protected Quick Tunnels: simple accountless authentication for your next dev projectWe launched Quick Tunnels in 2021 to give developers an easy way to share their latest service, application, or project running in their local development environment. A lot has changed since then, but the core use case remains the same. Yo
Cloudflare Blog