Product Updates

At Cloudflare we're dedicated to constantly improving our product. Read below to find out the latest updates.

FILTER BY:
  • feature2018 Q2

    Rate Limiting has new Actions and Triggers

    Mon, May 21, 2018 

    Rate Limiting has two new features: challenges (CAPTCHA and JS Challenge) as an Action; and matching Header attributes in the response (from either origin or the cache) as the Trigger. These features give more control over how Cloudflare Rate Limiting responds to threshold violations, giving customers granularity over the types of requests to "count" to fit their different applications. To learn more, go to the blog post.

  • feature2018 Q2

    Support purge-by-tag for large tag sizes

    Thu, May 10, 2018 

    The Cache-Tag header now supports up to 1000 tags and a total header length of 16kb. This update simplifies file purges for customers who deploy websites with Drupal.

  • feature2018 Q2

    Multi-User Access on dash.cloudflare.com

    Wed, May 2, 2018 

    Starting May 2 2018, users can go to the new home of Cloudflare’s Dashboard at dash.cloudflare.com and share account access. This has been supported at our Enterprise level of service, but is now being extended to all customers.

  • feature2018 Q2

    Support full SSL (Strict) mode validation for CNAME domains

    Thu, April 12, 2018 

    Cloudflare is now able to validate origin certificates that use a hostname's CNAME target in Full SSL (Strict) mode. Previously, Cloudflare would not validate any certificate without a direct match of the HTTP hostname and the certificate's Common Name or SAN. This update allows SSL for SaaS customers to more easily enable end-to-end security.

  • product2018 Q2

    Cloudflare Spectrum

    Thu, April 12, 2018 

    Spectrum protects TCP applications and ports from volumetric DDoS attacks and data theft by proxying non-web traffic through Cloudflare’s Anycast network.

  • feature2018 Q2

    Workers Can Control Cache TTL by Response Code

    Wed, April 11, 2018 

    Cloudflare workers can now control cache TTL by response code. This provides greater control over cached assets with Cloudflare Workers.

  • product2018 Q2

    Argo Tunnel

    Thu, April 5, 2018 

    Argo Tunnel ensures that no visitor or attacker can reach your web server unless they first pass through Cloudflare. Using a lightweight agent installed on origin infrastructure, including containers or virtual machines, Cloudflare creates an encrypted tunnel between its nearest data center and an application’s origin server without opening a public inbound port.

  • product2018 Q1

    Cloudflare Nimbus

    Fri, March 23, 2018 

    Cloudflare is strengthening the Certificate Transparency (CT) ecosystem with our introduction of Nimbus, a free and open CT log. Certificate Transparency improves security online by bringing accountability to the system that protects HTTPs. Additionally, we have published Merkle Town, a dashboard for exploring and monitoring the certificate transparency ecosystem.

  • feature2018 Q1

    Load Balancing Configurable Weighting

    Thu, March 8, 2018 

    Configurable weighting allows for user defined weighting for how much traffic an origin server receives.

  • feature2018 Q1

    Secondary DNS

    Fri, March 2, 2018 

    Cloudflare can easily be setup as a secondary DNS provider. When records are edited with the primary DNS provider, the corresponding records at Cloudflare are automatically updated.

  • feature2018 Q1

    Zone Lockdown

    Wed, February 28, 2018 

    Zone Lockdown allows for the whitelisting of specific IP addresses and IP ranges, whereby all other IPs are effectively blacklisted. This supports specific sub-domains and URLs and is useful to protect an administrative area from non-specified IP addresses.

  • feature2018 Q1

    User Agent Blocking Rules

    Wed, February 28, 2018 

    Create a rule to block or challenge a specific User Agent from accessing your domain. This works similarly to Zone Lockdown, except the block examines incoming User-Agent strings rather than IPs. User Agent blocking applies to an entire zone, and sub-domains cannot not be specified.

  • product2018 Q1

    Cloudflare Workers Beta is Now Open

    Thu, February 1, 2018 

    Cloudflare Workers lets you run JavaScript on Cloudflare’s edge, deploying globally to over 120+ data centers around the world in less than 30 seconds. Your code can intercept and modify any request made to your website, make outbound requests to any URL on the Internet, and replace much of what you might need to configure your CDN to do today.

  • feature2018 Q1

    Cache Deception Armor

    Fri, January 19, 2018 

    In light of cache deception attacks, we have released a tool called Cache Deception Armor to help our customers make sure only assets that should be cached are being cached.

  • product2018 Q1

    Cloudflare Access

    Wed, January 17, 2018 

    Cloudflare Access offers secure application access without a VPN. Users can secure, authenticate, and monitor user access to any domain, application, or path on Cloudflare.

  • feature2018 Q1

    Load Balancing Event Logs

    Tue, January 16, 2018 

    Load Balancing event logs allow for the review and filtering of status changes of your Load Balancing Origins and Pools.

  • feature2017 Q4

    Support for Cache-Control Header Extensions

    Thu, December 14, 2017 

    Cloudflare now supports additional HTTP cache-control directives. These headers allow more control over content caching behavior and enable our cache to handle more complex instructions for handling online assets.  

  • feature2017 Q4

    CAA Record Support

    Tue, December 5, 2017 

    Cloudflare now supports Certification Authority Authorization (CAA). CAA records allow domain owners to specify which CAs are authorized to issue certificates for their domain (or subdomain, as CAAs can be defined at any level of the hierarchy).

  • feature2017 Q4

    Cloudflare's New Server Response Header

    Mon, November 27, 2017 

    Cloudflare's Nginx response header will change from 'cloudflare-nginx' to 'cloudflare'. This migration will begin on 11/29 and will take 1-2 months for all customers.

  • feature2017 Q4

    Audit Logs

    Fri, November 17, 2017 

    Cloudflare's newly released Audit Logs offer the ability to view and download the most recent changes made to domains or account settings. It is provided in both the dashboard and via API.

  • feature2017 Q4

    Cloudflare Supports Privacy Pass

    Thu, November 9, 2017 

    When people use anonymity services or shared IPs, it makes it more difficult for website protection services like Cloudflare to identify their requests as coming from legitimate users and not bots. The Privacy Pass browser extension reduces the number of challenge pages presented by Cloudflare by letting users prove their identity across multiple sites anonymously. The Privacy Pass extension is available for both Chrome and Firefox.

  • feature2017 Q4

    Load Balancing Session Affinity

    Thu, October 5, 2017 

    Cloudflare Load Balancing now supports session affinity, using automatically generated cookies. If session affinity is enabled, the same target receives the request and can use the automated cookie to recover an existing session with the origin server.

  • feature2017 Q4

    Argo Analytics

    Tue, October 3, 2017 

    Customers with Argo Smart Routing enabled can now get an in-depth look at dynamic content performance statistics across both requests and geographies.

  • feature2017 Q3

    Geo Key Manager

    Tue, September 26, 2017 

    Geo Key Manager provides the ability to choose which Cloudflare data centers have access to private keys in order to establish HTTPS connections. Cloudflare has preconfigured options to select from either US or EU data centers as well as the highest security data centers in the Cloudflare network. Data centers without access to private keys can still terminate TLS, but they will experience a slight initial delay when contacting the nearest Cloudflare data center storing the private key.