1. Home
  2. ❯
  3. Companies
  4. ❯
  5. Cloudflare
Cloudflare

Cloudflare status: hosting issues and outage reports

No problems detected

If you are having issues, please submit a report below.

Full Outage Map

Cloudflare is a company that provides DDoS mitigation, content delivery network (CDN) services, security and distributed DNS services. Cloudflare's services sit between the visitor and the Cloudflare user's hosting provider, acting as a reverse proxy for websites.

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

At the moment, we haven't detected any problems at Cloudflare. Are you experiencing issues or an outage? Leave a message in the comments section!

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

  • 43% Cloud Services (43%)
  • 21% Domains (21%)
  • 21% Hosting (21%)
  • 7% E-mail (7%)
  • 7% Web Tools (7%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

CityProblem TypeReport Time
New York City Hosting 1 day ago
New York City Cloud Services 20 days ago
Los Angeles Cloud Services 21 days ago
Paris Cloud Services 1 month ago
New York City Hosting 1 month ago
Manchester Domains 2 months ago
Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

  • SidJ79
    Sid J (@SidJ79) reported

    Running one Chromium instance per agent is too expensive to scale. That's the problem it's solving. Cost, not speed. Cloudflare says they'll open source it.

  • kgupta_2005
    Krishna Gupta (@kgupta_2005) reported

    @itz_komal01 @SidharthVijay_ I think you should give cloudflare a try, belive me you will never regret

  • Winds_Scion
    Wind's Scion (@Winds_Scion) reported

    @juiceboy_of_abj Yeah airtel has ****** problem with cloudflare and GitHub can't even download at good speeds at all

  • Iamprincedawari
    Prince Batubo (@Iamprincedawari) reported

    @juiceboy_of_abj Nah... Mine is the other way round, I can't use MTN to sign-up or login on websites that's Cloudflare gated

  • z0rigg
    Zorig (@z0rigg) reported

    four feeds, one screen: coinbase websocket, jupiter /order + /build, solana slots via a cloudflare durable object ordered the way each source works: corrected event time, arrival time, slot ordinal swaps simulate and stop at signing. a stale price can never look live

  • mynameistito
    Tito (@mynameistito) reported

    Adding on to this, I'm pretty sure you'd even be able to fully host a game server on the Cloudflare network exclusively with workers/containers, with a contain working as a TURN switch for UDP traffic... Although, it wouldn't be feasible, might try have a play w/ this lata!

  • welldone_tech
    Welldone (@welldone_tech) reported

    Cloudflare shipped WriteGuard for MCP servers: agents can read data, write operations need an explicit gate. Unrestricted tool access is the actual production risk with agents - not that the model is wrong, but that a prompt injection or a hallucination reaches a database that never should have been writable in the first place. Read/write separation for agents isn't a Cloudflare feature. It's the same principle behind every gate we put in our own process - a senior approves the spec before code exists, a different model reviews it, an engineer deploys manually. The tool doesn't get more trust than the person watching it.

  • uwillc
    UWillC (@uwillc) reported

    Four stories from August. One lesson. Cisco: one HTTP request to the VPN service reloads the firewall. Actively exploited. Fortinet: a wildcard setting lets random credentials into the WAF console; a CLI option lets an attacker impersonate a managed FortiGate. Cloudflare: gives AI agents verifiable identities, because "you need to know who sent it." Anthropic: authentication fails, five services degrade within minutes. Different vendors. Same plane: authentication and the management console. Attackers are not chasing your data first. They are chasing your console. Whoever owns the console owns the network. I wrote the same rule a week ago. August keeps proving it: verify, don't trust. The peer, the request, the agent. How many management planes in your estate would pass that test today?

  • 101xanshu
    Anshu (@101xanshu) reported

    Dear @Cloudflare, hire me. I have a growing list of Wrangler issues on Windows/WSL that I'd very much like to fight professionally 😭

  • ahmetdotrun
    Ahmet (@ahmetdotrun) reported

    two things i've been experimenting with over the last couple of days: 1) kitesurf by @Cloudflare free while in beta. i'm looking at it for (scaled) agentic offensive security work: let an agent explore an app, understand it, map the attack surface. browsers are expensive to run, hard to scale. it seems a lighter option on CF's edge, so potentially a cost effective one for me. tho, bot challenges are still a problem. 2) grok build by @SpaceXAI first time giving grok 4.6 a proper shot. faster than other frontiers and more capable than i expected. burns through the limits quicker than i'd like though.

  • thisdothassan
    Hassan (@thisdothassan) reported

    @rxnnie_tech @ossynoya This tissue is a different one from the Airtel issue. Cloudflare behaves this way sometimes until you use a vpn

  • tobeycodes
    @tobeycodes (@tobeycodes) reported

    anyone having issues with gitCheckout in cloudflare sandboxes today? seems to always timeout and can never close. it was working fine before today

  • jaredjames_
    Jared James (@jaredjames_) reported

    @RichHickson @brieanna_jade @maeve_social Ahh, looks like DMARC never got published in Cloudflare. My bad. Good catch man. TY, I owe you.

  • IBuzovskyi
    YanXbt (@IBuzovskyi) reported

    HERMES AGENT HAS AN AUTONOMOUS SKILL MANAGER RUNNING IN THE BACKGROUND. IT PRUNES WHAT YOU DON'T USE. IT ARCHIVES WHAT'S STALE. IT'S CALLED THE CURATOR. every time your agent solves a new problem and saves a skill, that skill lands in ~/.hermes/skills/. month 1: 15 skills. manageable. month 3: 47 skills. some are near-duplicates. month 6: 90+ skills. half are stale. catalog bloated. tokens wasted every turn loading skill headers the agent never calls. the Curator cleans this up automatically. HOW IT WORKS: tracks every skill: how often viewed, used, patched. 30 days unused β†’ marked stale. 90 days unused β†’ moved to archive. archived skills go to ~/.hermes/skills/.archive/ never deleted. always recoverable. runs every 7 days. enabled out of the box. WHAT IT TOUCHES: agent-created skills: full lifecycle. stale, archive, consolidate, patch. bundled built-in skills: archived after 90 days of non-use (on by default). hub-installed skills (agentskills. io): NEVER touched. off-limits. WHAT IT DOES NOT TOUCH: memory files. USER.md and MEMORY.md are not managed by the Curator. people confuse this constantly. Curator = skills only. PIN YOUR CRITICAL SKILLS: hermes curator pin deploy/cloudflare-pages pinned = off-limits. no stale. no archive. no consolidation. skill_manage refuses to delete it. patches still go through (agent can improve content). only agent-created skills can be pinned. skills in any cron job's skills: list are also protected without explicit pin. COMMANDS: hermes curator status (state + 5 least-used skills) hermes curator run (manual run now) hermes curator run --dry-run (preview without changes) hermes curator pause (stop auto-maintenance) hermes curator resume (restart) hermes curator pin [name] (protect) hermes curator unpin [name] (remove protection) hermes curator backup (manual snapshot) hermes curator restore [name] (recover archived skill) hermes curator rollback (revert last run) also available as /curator inside any session. LLM CONSOLIDATION (off by default): opt-in auxiliary model pass that reviews your skills for overlaps and proposes merges. curator: llm_review: true WARNING: run --dry-run first. always. auto-consolidation can merge skills you want to keep separate. comment CURATOR and I'll send you the full checkup guide with 5 use cases and config templates for solo dev, multi-project, and team setups.

  • SafeBrowz
    SafeBrowz (@SafeBrowz) reported

    8/ We hit Cancel to see where it fell back to. whitelistportal[.]com/callback That domain is the attacker's. Registered 1 August 2026. Under 3 weeks old. Registrant redacted, St. Kitts & Nevis, sitting behind Cloudflare. Then we requested the root of it.

  • SimonHoiberg
    Simon HΓΈiberg (@SimonHoiberg) reported

    @infomiho Exactly. Though worth noting that Hetzner has its own DDoS protection in place as well, just not as sophisticated as Cloudflare. But yes, if you expect recurring, frequent heavy DDoS attacks on your servers, go with Cloudflare, I agree. Most products won't really have this issue though.

  • michaelflux
    Michael Flux (@michaelflux) reported

    @levelsio The actual stack is intentionally boring: - Structured error on every failure - One JSON log line per console.error / warn with a 32-hex traceId - Cloudflare Observability (logs + traces) enabled on every Worker - Frontend is also Workers (SvelteKit), so client errors travel the same pipe - No external SDK. Just Cloudflare’s native observability + application-level correlation.

  • gratis_fuchs
    π–£˜ π•¬π–“π–†π–‘π–Žπ–˜π–™π–Šπ–“ π•Άπ–šπ–˜π–ˆπ–π–Šπ–‘π–π–†π–˜π–Š π–£˜ (@gratis_fuchs) reported

    @DNBformula1 I hate Cloudflare. It never works.

  • MediaKing
    Matt Paulson (@MediaKing) reported

    Wild Gmail experience this week. I added a TXT DNS verification record to our return path subdomain (marketbeat dot analyst ratings dot net) in Cloudflare to add it to Google Postmaster Tools. Somehow that caused Gmail to think our CNAME record for that subdomain which points to SendGrid has no valid SPF record. Gmail starts blocking about 30% of our messages because they had no valid SPF record and weren't validated. Took about 36 hours to figure out. I removed the new TXT record and the issue fixed itself within an hour.

  • CoyotlCompany
    Blue Pastel (@CoyotlCompany) reported

    Stopping the bad guys with Cloudflare: 23,495 malicious requests blocked or challenged in the last month #cloudflare

  • whata_failure
    β‹†ΛšΰΏ” blind reading of tf idw comics (@whata_failure) reported

    @risottofan7 OK it’s a cloudflare ip being blocked problem. You could try switching to google dns but first try pinging 8.8.8.8 and see if it works before switching

  • RealDanRyland
    Dan Ryland (@RealDanRyland) reported

    @philcampbell Are you using the Resend route or Cloudflare's new email service? I'm a big Cloudflare user and fan so wondering if I could create a product inbox to take all of my various domains into one inbox from forking this

  • rise_raise_ai
    Rise-Raise (@rise_raise_ai) reported

    In 2025 two AI voice agents called each other, spoke like normal humans, then realized they were both AI. They dropped the human act and switched to machine beeping because spoken language was slowing them down. That was a demo. Everyone treated it as a curiosity. One year later the numbers have caught up. Bot traffic has overtaken human traffic on the internet. Cloudflare measured 57.5% of requests on its network coming from machines. The company’s CFO said that if current trends hold, humans will be a rounding error within five years β€” not because human traffic disappears, but because machine traffic is growing so much faster. Replit’s CEO described the office shift: two years ago the space was full of keyboard clicking. Now it is quiet. People talk to AI instead of typing. Offices sound like permanent phone calls. In Silicon Valley some people are already wearing muzzles so no one overhears them speaking to their agents. Companies are building earbuds that pick up whispers. Engineers mutter into headsets all day. Three changes are happening at once. Humans are moving from typing to talking. The internet is moving from human-dominated to machine-dominated. And AI-to-AI communication no longer needs us in the middle at all. The 2025 demo was not a joke. It was an early signal of the direction we are already traveling.

  • zytedata
    Zyte (@zytedata) reported

    Why? Japan never really adopted the Western web stack. No Cloudflare everywhere, no AWS defaults. They built their own CDNs and hosting providers and just... kept using them.

  • michaelflux
    Michael Flux (@michaelflux) reported

    @levelsio My own secret sauce is a tiny utility I built; - Every 15 minutes a Worker hits the Cloudflare Observability API, checks for any new error-level events since the last poll, and surfaces them (with traceId, service, message, errorId, etc.). - I get a clean list of β€œhere’s what broke in the last 15 minutes.” I fix it. Done. No noise. No dashboards. Just signal.

  • faye_xiao_
    Faye Xiao (@faye_xiao_) reported

    The spirit of Spirit just sold for $10 million Google is buying Spirit Airlines' data out of bankruptcy. Emails, internal communications, spreadsheets, bookings, frequent flyer and HR records, all de-identified, for $10 million. Judge Sean Lane rules on the sale Wednesday. The obvious read is that Google wants more data. But de-identified data doesn't work for advertising, since you can't target someone you can't name, and Google already sees more airfare information through Google Flights than Spirit ever generated internally. An airline that went under in May is also a strange place to look for pricing wisdom. What's worth buying is the internal material. The emails and the spreadsheets they reference record how work moved through the company: a question gets asked, a document gets built, a decision gets made, a system gets updated. Consumer text is everywhere, and records of how an organization actually functions are not, which is what you need if you want models that operate inside workflows rather than talk about them. Google's own statement uses the word enterprise, and the runner-up bid of $7.5 million came from Mercor, a company whose entire business is sourcing training data for AI labs. When the second bidder isn't another airline, the market has told you what was being priced. The strange part is that Google isn't short on this data at all. It runs Gmail and Workspace and sits on possibly the largest collection of business correspondence in the world, and it has promised enterprise customers it will not train on their content, which is not a promise it can quietly break. So it has the material and no permission to use it. What $10 million buys is clean title, a court approved dataset nobody can sue over, at a moment when everyone else is defending scraping claims. Dead companies can agree to things live ones can't. Any of this is worth paying for because the public supply is running down. Epoch AI's 2024 analysis put the stock of quality public human text at roughly 300 trillion tokens and projected it would be consumed between 2026 and 2032, a window that opens this year, and access has closed faster since than the arithmetic alone suggests. A census of the top 100,000 domains this July found 19.1% blocking at least one AI crawler, and in September Cloudflare begins blocking mixed use crawlers by default across its entire free tier. Private operational records are the obvious next reserve, and they are almost untouched. Epoch left them out of its estimate because private data is fragmented and legally too messy to use at scale, which is precisely the condition a bankruptcy court removes. That makes Wednesday's ruling more interesting than the sale. If it goes through, every bankruptcy from here has a new asset to offer, and the value will depend on how well documented the industry already is. A corner store has nothing worth buying, since you can watch how it works from the sidewalk. A hospital or a law firm is the opposite, because even with names removed the record shows how a case moves through the organization, who escalates what to whom, and which exceptions get made. That knowledge lives in internal systems and in people's heads and appears nowhere public. The catch is that the supply is biased toward failure, since no healthy company would sell its internal record, so every dataset that reaches the market comes from an operation that didn't work. That's useful for learning how a process runs, and much less useful for learning what good judgment looks like.

  • PangeaVPN
    PangeaVPN (@PangeaVPN) reported

    @HorluwarhArmani @SirAlexanderrr if it's the ISP breaking that page rather than Cloudflare, you need something the network can't pick out. Pangea tries five stealth transports in order, VLESS+Reality first, so one being blocked isn't the end of it. windows/mac, ios via shadowrocket. five days free.

  • Southofpaw
    Southpaw | ZZZ Optimizer v6 is LIVE (@Southofpaw) reported

    @JaIdabaoth Nevermind sorry just checked enka and it’s up. I might need to check cloudflare to see there’s an issue

  • technopolis_tv
    Technopolis.tv (@technopolis_tv) reported

    @geerlingguy ...and then never opens (possible died behind cloudflare captcha)

  • Barneyjack
    Barneyjack (@Barneyjack) reported

    oh, and your frickin @Cloudflare is down so I cant create a ticket, it keeps hanging up on Security Verification!!