导航|地址|刷新
Posts tagged "Research"




















Skip to content
















All Categories

AI

Developers

Radar

Product News

Security

Policy & Legal

Zero Trust

Speed & Reliability

Life at Cloudflare

Partners



Switch Site Language

English

Deutsch

Español

Español (Latinoamérica)

Français

Italiano

日本語

한국어

繁體中文

简体中文

Português

Русский

Bahasa Indonesia

ภาษาไทย

Tiếng Việt

Polski

العربية

עברית

Svenska

Nederlands

Türkçe

LoginContact Sales









TAG

Research







July 29, 2026
Post-quantum authentication to origins is now supported

Cloudflare now supports post-quantum (PQ) authentication when connecting to customer origin servers via Authenticated Origin Pulls and Custom Origin Trust Store. This is the first step towards providing PQ authentication for all Cloudflare products.




Luke Valenta and Kevin Guthrie



July 9, 2026
Why we cannot wait for better post-quantum signature algorithms

NIST is advancing nine new post-quantum signature algorithms as potential candidates for future standardization. We take a closer look at all of them, and argue that while they are in the works and show great potential, we should use ML-DSA for now — the best currently available.




Bas Westerbaan and Christopher Patton







July 8, 2026
Introducing Meerkat: an experiment in global consensus

Cloudflare Research is building a global consensus service called Meerkat that uses a new consensus algorithm called QuePaxa. We plan to use Meerkat to build a strongly consistent, fault-tolerant key-value store, and other applications.




James Larisch, Bob Halley, and João Pedro Leite



June 18, 2026
Build your own vulnerability harness

We break down the technical architecture behind our multi-stage vulnerability discovery harness and automated triage loop. Learn how we manage state controls, squash false positives through adversarial review, and route around LLM context limits.




Dan Jones,Alexandra Godoi, and Grant Bourzikas







April 21, 2026
Moving past bots vs. humans

As AI assistants and privacy proxies challenge the capabilities of traditional bot detection, the Web needs new models for accountability. We believe that control should remain with the client, and that an open ecosystem of anonymous credentials is key to preserving user privacy while protecting origins from abuse.




Thibault Meunier



April 17, 2026
Unweight: how we compressed an LLM 22% without sacrificing quality

Running LLMs across Cloudflare’s network requires us to be smarter and more efficient about GPU memory bandwidth. That’s why we developed Unweight, a lossless inference-time compression system that achieves up to a 22% model footprint reduction, so that we can deliver faster and cheaper inference than ever before.




Mari Galicer,Ivan Nikulin, and Chris Branch







April 2, 2026
Why we're rethinking cache for the AI era

The explosion of AI-bot traffic, representing over 10 billion requests per week, has opened up new challenges and opportunities for cache design. We look at some of the ways AI bot traffic differs from humans, how this impacts CDN cache, and some early ideas for how Cloudflare is designing systems to improve the AI and human experience.




Avani Wildani and Suleman Ahmad



February 27, 2026
Bringing more transparency to post-quantum usage, encrypted messaging, and routing security

Cloudflare Radar has added new tools for monitoring PQ adoption, KT logs for messaging, and ASPA routing records to track the Internet's migration toward more secure encryption and routing standards.




David Belson,Mingwei Zhang,André Jesus,Suleman Ahmad,Sabina Zejnilovic,Thibault Meunier, and Mari Galicer







December 11, 2025
React2Shell and related RSC vulnerabilities threat brief: early exploitation activity and threat actor techniques

Early activity indicates that threat actors quickly integrated this vulnerability into their scanning and reconnaissance routines and targeted critical infrastructure including nuclear fuel, uranium and rare earth elements. We outline the tactics they appear to be using and how Cloudflare is protecting customers.




Cloudforce One



November 3, 2025
Fresh insights from old data: corroborating reports of Turkmenistan IP unblocking and firewall testing

Cloudflare used historical data to investigate reports of potential new firewall tests in Turkmenistan. Shifts in TCP resets/timeouts across ASNs corroborate large-scale network control system changes.




Luke Valenta and Marwan Fayed







October 30, 2025
Beyond IP lists: a registry format for bots and agents

We propose an open registry format for Web Bot Auth to move beyond IP-based identity. This allows any origin to discover and verify cryptographic keys for bots, fostering a decentralized and more trustworthy ecosystem.




Thibault Meunier and Maxime Guerreiro



October 30, 2025
Anonymous credentials: rate-limiting bots and agents without compromising privacy

As AI agents change how the Internet is used, they create a challenge for security. We explore how Anonymous Credentials can rate limit agent traffic and block abuse without tracking users or compromising their privacy.




Thibault Meunier,Christopher Patton,Lena Heimberger, and Armando Faz-Hernández







October 29, 2025
So long, and thanks for all the fish: how to escape the Linux networking stack

Many products at Cloudflare aren’t possible without pushing the limits of network hardware and software to deliver improved performance, increased efficiency, or novel capabilities such as soft-unicast, our method for sharing IP subnets across data centers. Happily, most people do not need to know the intricacies of how your operating system handles network and Internet access in general. Yes, even most people within Cloudflare. But sometimes we try to push well beyond the design intentions of Linux’s networking stack. This is a story about one of those attempts.




Chris Branch



October 29, 2025
One IP address, many users: detecting CGNAT to reduce collateral effects

IPv4 scarcity drives widespread use of Carrier-Grade Network Address Translation, a practice in ISPs and mobile networks that places many users behind each IP address, along with their collected activity and volumes of traffic. We introduce the method we’ve developed to detect large-scale IP sharing globally and mitigate the issues that result.




Vasilis Giotsas and Marwan Fayed







October 29, 2025
Measuring characteristics of TCP connections at Internet scale

Researchers and practitioners have been studying connections almost as long as the Internet that supports them. Today, Cloudflare’s global network receives millions of connections per second. We explore various characteristics of TCP connections, including lifetimes, sizes, and more.




Suleman Ahmad and Peter Wu



October 29, 2025
How to build your own VPN, or: the history of WARP

WARP’s initial implementation resembled a VPN that allows Internet access through it. Here’s how we built it – and how you can, too.




Chris Branch







October 29, 2025
Defending QUIC from acknowledgement-based DDoS attacks

We identified and patched two DDoS vulnerabilities in our QUIC implementation related to packet acknowledgements. Cloudflare customers were not affected. We examine the "Optimistic ACK" attack vector and our solution, which dynamically skips packet numbers to validate client behavior. 




Apoorv Kothari and Louis Navarre



October 28, 2025
State of the post-quantum Internet in 2025

Today over half of human-initiated traffic with Cloudflare is protected against harvest-now/decrypt-later with post-quantum encryption. What once was a cool science project, is the new security baseline for the Internet. We’re not done yet: in this blog post we’ll take measure where we are, what we expect for the coming years, and what you can do today.




Bas Westerbaan








Load more










Subscribe to receive notifications of new posts


Email address


We’ll never share your email address.

Subscribe

Thanks for subscribing! Check your inbox to confirm.











Getting Started

Plans

Contact sales

Partners

Find a partner

Startups

Under attack?

Domain name search



Public interest

Project Galileo

Athenian Project

Cloudflare for Campaigns

Project Fairshot

Impact/ESG



Resources

App innovation report

Cloudflare Radar

Case studies

Status

Support

Events

Blog



Solutions

SSE and SASE platform

Cloudflare AI Cloud

AI Security

Frontend Development Platform

Multi-Tenant Platform Development

Web Security Platform



Company

About

Careers

Investors

Press

Press kit

Global network



Compliance

Compliance resources

Trust

GDPR

Responsible AI

Transparency report

Report abuse



Developers

Documentation

Learning center

Community



Start building

Login










© 2026 Cloudflare, Inc.

|Your privacy choicesReport security issues|Privacy Policy|Terms of use|GDPR|Trademark









Search is temporarily unavailable.

Products

Solutions

Resources

Pricing

Login opens in a new tabContact Sales opens in a new tabStart Building opens in a new tab


opens in a new tab opens in a new tab opens in a new tab

All Categories

AI

Developers

Radar

Product News

Security

Policy & Legal

Zero Trust

Speed & Reliability

Life at Cloudflare

Partners

English

Switch Site Language

English

Deutsch

Español

Español (Latinoamérica)

Français

Italiano

日本語

한국어

繁體中文

简体中文

Português

Русский

Bahasa Indonesia

ภาษาไทย

Tiếng Việt

Polski

العربية

עברית

Svenska

Nederlands

Türkçe

LightDark



------
导航页 打开网址