Cloudflare status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

• Cloud Services (43%)
• Domains (21%)
• Hosting (21%)
• E-mail (7%)
• Web Tools (7%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

City	Problem Type	Report Time
New York City	Hosting	1 day ago
New York City	Cloud Services	20 days ago
Los Angeles	Cloud Services	21 days ago
Paris	Cloud Services	1 month ago
New York City	Hosting	1 month ago
Manchester	Domains	2 months ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Sid J (@SidJ79) reported 9 minutes ago

  Running one Chromium instance per agent is too expensive to scale. That's the problem it's solving. Cost, not speed. Cloudflare says they'll open source it.

• 
  Krishna Gupta (@kgupta_2005) reported 14 minutes ago

  @itz_komal01 @SidharthVijay_ I think you should give cloudflare a try, belive me you will never regret

• 
  Wind's Scion (@Winds_Scion) reported 15 minutes ago

  @juiceboy_of_abj Yeah airtel has ****** problem with cloudflare and GitHub can't even download at good speeds at all

• 
  Prince Batubo (@Iamprincedawari) reported 17 minutes ago

  @juiceboy_of_abj Nah... Mine is the other way round, I can't use MTN to sign-up or login on websites that's Cloudflare gated

• 
  Zorig (@z0rigg) reported 19 minutes ago

  four feeds, one screen: coinbase websocket, jupiter /order + /build, solana slots via a cloudflare durable object ordered the way each source works: corrected event time, arrival time, slot ordinal swaps simulate and stop at signing. a stale price can never look live

• 
  Tito (@mynameistito) reported 20 minutes ago

  Adding on to this, I'm pretty sure you'd even be able to fully host a game server on the Cloudflare network exclusively with workers/containers, with a contain working as a TURN switch for UDP traffic... Although, it wouldn't be feasible, might try have a play w/ this lata!

• 
  Welldone (@welldone_tech) reported 21 minutes ago

  Cloudflare shipped WriteGuard for MCP servers: agents can read data, write operations need an explicit gate. Unrestricted tool access is the actual production risk with agents - not that the model is wrong, but that a prompt injection or a hallucination reaches a database that never should have been writable in the first place. Read/write separation for agents isn't a Cloudflare feature. It's the same principle behind every gate we put in our own process - a senior approves the spec before code exists, a different model reviews it, an engineer deploys manually. The tool doesn't get more trust than the person watching it.

• 
  UWillC (@uwillc) reported 22 minutes ago

  Four stories from August. One lesson. Cisco: one HTTP request to the VPN service reloads the firewall. Actively exploited. Fortinet: a wildcard setting lets random credentials into the WAF console; a CLI option lets an attacker impersonate a managed FortiGate. Cloudflare: gives AI agents verifiable identities, because "you need to know who sent it." Anthropic: authentication fails, five services degrade within minutes. Different vendors. Same plane: authentication and the management console. Attackers are not chasing your data first. They are chasing your console. Whoever owns the console owns the network. I wrote the same rule a week ago. August keeps proving it: verify, don't trust. The peer, the request, the agent. How many management planes in your estate would pass that test today?

• 
  Anshu (@101xanshu) reported 23 minutes ago

  Dear @Cloudflare, hire me. I have a growing list of Wrangler issues on Windows/WSL that I'd very much like to fight professionally 😭

• 
  Ahmet (@ahmetdotrun) reported 23 minutes ago

  two things i've been experimenting with over the last couple of days: 1) kitesurf by @Cloudflare free while in beta. i'm looking at it for (scaled) agentic offensive security work: let an agent explore an app, understand it, map the attack surface. browsers are expensive to run, hard to scale. it seems a lighter option on CF's edge, so potentially a cost effective one for me. tho, bot challenges are still a problem. 2) grok build by @SpaceXAI first time giving grok 4.6 a proper shot. faster than other frontiers and more capable than i expected. burns through the limits quicker than i'd like though.

• 
  Hassan (@thisdothassan) reported 27 minutes ago

  @rxnnie_tech @ossynoya This tissue is a different one from the Airtel issue. Cloudflare behaves this way sometimes until you use a vpn

• 
  @tobeycodes (@tobeycodes) reported 28 minutes ago

  anyone having issues with gitCheckout in cloudflare sandboxes today? seems to always timeout and can never close. it was working fine before today

• 
  Jared James (@jaredjames_) reported 29 minutes ago

  @RichHickson @brieanna_jade @maeve_social Ahh, looks like DMARC never got published in Cloudflare. My bad. Good catch man. TY, I owe you.

• 
  YanXbt (@IBuzovskyi) reported 31 minutes ago

  HERMES AGENT HAS AN AUTONOMOUS SKILL MANAGER RUNNING IN THE BACKGROUND. IT PRUNES WHAT YOU DON'T USE. IT ARCHIVES WHAT'S STALE. IT'S CALLED THE CURATOR. every time your agent solves a new problem and saves a skill, that skill lands in ~/.hermes/skills/. month 1: 15 skills. manageable. month 3: 47 skills. some are near-duplicates. month 6: 90+ skills. half are stale. catalog bloated. tokens wasted every turn loading skill headers the agent never calls. the Curator cleans this up automatically. HOW IT WORKS: tracks every skill: how often viewed, used, patched. 30 days unused → marked stale. 90 days unused → moved to archive. archived skills go to ~/.hermes/skills/.archive/ never deleted. always recoverable. runs every 7 days. enabled out of the box. WHAT IT TOUCHES: agent-created skills: full lifecycle. stale, archive, consolidate, patch. bundled built-in skills: archived after 90 days of non-use (on by default). hub-installed skills (agentskills. io): NEVER touched. off-limits. WHAT IT DOES NOT TOUCH: memory files. USER.md and MEMORY.md are not managed by the Curator. people confuse this constantly. Curator = skills only. PIN YOUR CRITICAL SKILLS: hermes curator pin deploy/cloudflare-pages pinned = off-limits. no stale. no archive. no consolidation. skill_manage refuses to delete it. patches still go through (agent can improve content). only agent-created skills can be pinned. skills in any cron job's skills: list are also protected without explicit pin. COMMANDS: hermes curator status (state + 5 least-used skills) hermes curator run (manual run now) hermes curator run --dry-run (preview without changes) hermes curator pause (stop auto-maintenance) hermes curator resume (restart) hermes curator pin [name] (protect) hermes curator unpin [name] (remove protection) hermes curator backup (manual snapshot) hermes curator restore [name] (recover archived skill) hermes curator rollback (revert last run) also available as /curator inside any session. LLM CONSOLIDATION (off by default): opt-in auxiliary model pass that reviews your skills for overlaps and proposes merges. curator: llm_review: true WARNING: run --dry-run first. always. auto-consolidation can merge skills you want to keep separate. comment CURATOR and I'll send you the full checkup guide with 5 use cases and config templates for solo dev, multi-project, and team setups.

• 
  SafeBrowz (@SafeBrowz) reported 32 minutes ago

  8/ We hit Cancel to see where it fell back to. whitelistportal[.]com/callback That domain is the attacker's. Registered 1 August 2026. Under 3 weeks old. Registrant redacted, St. Kitts & Nevis, sitting behind Cloudflare. Then we requested the root of it.

• 
  Simon Høiberg (@SimonHoiberg) reported 37 minutes ago

  @infomiho Exactly. Though worth noting that Hetzner has its own DDoS protection in place as well, just not as sophisticated as Cloudflare. But yes, if you expect recurring, frequent heavy DDoS attacks on your servers, go with Cloudflare, I agree. Most products won't really have this issue though.

• 
  Michael Flux (@michaelflux) reported 37 minutes ago

  @levelsio The actual stack is intentionally boring: - Structured error on every failure - One JSON log line per console.error / warn with a 32-hex traceId - Cloudflare Observability (logs + traces) enabled on every Worker - Frontend is also Workers (SvelteKit), so client errors travel the same pipe - No external SDK. Just Cloudflare’s native observability + application-level correlation.

• 
  𖣘 𝕬𝖓𝖆𝖑𝖎𝖘𝖙𝖊𝖓 𝕶𝖚𝖘𝖈𝖍𝖊𝖑𝖍𝖆𝖘𝖊 𖣘 (@gratis_fuchs) reported 38 minutes ago

  @DNBformula1 I hate Cloudflare. It never works.

• 
  Matt Paulson (@MediaKing) reported 40 minutes ago

  Wild Gmail experience this week. I added a TXT DNS verification record to our return path subdomain (marketbeat dot analyst ratings dot net) in Cloudflare to add it to Google Postmaster Tools. Somehow that caused Gmail to think our CNAME record for that subdomain which points to SendGrid has no valid SPF record. Gmail starts blocking about 30% of our messages because they had no valid SPF record and weren't validated. Took about 36 hours to figure out. I removed the new TXT record and the issue fixed itself within an hour.

• 
  Blue Pastel (@CoyotlCompany) reported 43 minutes ago

  Stopping the bad guys with Cloudflare: 23,495 malicious requests blocked or challenged in the last month #cloudflare

• 
  ⋆˚࿔ blind reading of tf idw comics (@whata_failure) reported 44 minutes ago

  @risottofan7 OK it’s a cloudflare ip being blocked problem. You could try switching to google dns but first try pinging 8.8.8.8 and see if it works before switching

• 
  Dan Ryland (@RealDanRyland) reported 49 minutes ago

  @philcampbell Are you using the Resend route or Cloudflare's new email service? I'm a big Cloudflare user and fan so wondering if I could create a product inbox to take all of my various domains into one inbox from forking this

• 
  Rise-Raise (@rise_raise_ai) reported 50 minutes ago

  In 2025 two AI voice agents called each other, spoke like normal humans, then realized they were both AI. They dropped the human act and switched to machine beeping because spoken language was slowing them down. That was a demo. Everyone treated it as a curiosity. One year later the numbers have caught up. Bot traffic has overtaken human traffic on the internet. Cloudflare measured 57.5% of requests on its network coming from machines. The company’s CFO said that if current trends hold, humans will be a rounding error within five years — not because human traffic disappears, but because machine traffic is growing so much faster. Replit’s CEO described the office shift: two years ago the space was full of keyboard clicking. Now it is quiet. People talk to AI instead of typing. Offices sound like permanent phone calls. In Silicon Valley some people are already wearing muzzles so no one overhears them speaking to their agents. Companies are building earbuds that pick up whispers. Engineers mutter into headsets all day. Three changes are happening at once. Humans are moving from typing to talking. The internet is moving from human-dominated to machine-dominated. And AI-to-AI communication no longer needs us in the middle at all. The 2025 demo was not a joke. It was an early signal of the direction we are already traveling.

• 
  Zyte (@zytedata) reported 51 minutes ago

  Why? Japan never really adopted the Western web stack. No Cloudflare everywhere, no AWS defaults. They built their own CDNs and hosting providers and just... kept using them.

• 
  Michael Flux (@michaelflux) reported 53 minutes ago

  @levelsio My own secret sauce is a tiny utility I built; - Every 15 minutes a Worker hits the Cloudflare Observability API, checks for any new error-level events since the last poll, and surfaces them (with traceId, service, message, errorId, etc.). - I get a clean list of “here’s what broke in the last 15 minutes.” I fix it. Done. No noise. No dashboards. Just signal.

• 
  Faye Xiao (@faye_xiao_) reported 54 minutes ago

  The spirit of Spirit just sold for $10 million Google is buying Spirit Airlines' data out of bankruptcy. Emails, internal communications, spreadsheets, bookings, frequent flyer and HR records, all de-identified, for $10 million. Judge Sean Lane rules on the sale Wednesday. The obvious read is that Google wants more data. But de-identified data doesn't work for advertising, since you can't target someone you can't name, and Google already sees more airfare information through Google Flights than Spirit ever generated internally. An airline that went under in May is also a strange place to look for pricing wisdom. What's worth buying is the internal material. The emails and the spreadsheets they reference record how work moved through the company: a question gets asked, a document gets built, a decision gets made, a system gets updated. Consumer text is everywhere, and records of how an organization actually functions are not, which is what you need if you want models that operate inside workflows rather than talk about them. Google's own statement uses the word enterprise, and the runner-up bid of $7.5 million came from Mercor, a company whose entire business is sourcing training data for AI labs. When the second bidder isn't another airline, the market has told you what was being priced. The strange part is that Google isn't short on this data at all. It runs Gmail and Workspace and sits on possibly the largest collection of business correspondence in the world, and it has promised enterprise customers it will not train on their content, which is not a promise it can quietly break. So it has the material and no permission to use it. What $10 million buys is clean title, a court approved dataset nobody can sue over, at a moment when everyone else is defending scraping claims. Dead companies can agree to things live ones can't. Any of this is worth paying for because the public supply is running down. Epoch AI's 2024 analysis put the stock of quality public human text at roughly 300 trillion tokens and projected it would be consumed between 2026 and 2032, a window that opens this year, and access has closed faster since than the arithmetic alone suggests. A census of the top 100,000 domains this July found 19.1% blocking at least one AI crawler, and in September Cloudflare begins blocking mixed use crawlers by default across its entire free tier. Private operational records are the obvious next reserve, and they are almost untouched. Epoch left them out of its estimate because private data is fragmented and legally too messy to use at scale, which is precisely the condition a bankruptcy court removes. That makes Wednesday's ruling more interesting than the sale. If it goes through, every bankruptcy from here has a new asset to offer, and the value will depend on how well documented the industry already is. A corner store has nothing worth buying, since you can watch how it works from the sidewalk. A hospital or a law firm is the opposite, because even with names removed the record shows how a case moves through the organization, who escalates what to whom, and which exceptions get made. That knowledge lives in internal systems and in people's heads and appears nowhere public. The catch is that the supply is biased toward failure, since no healthy company would sell its internal record, so every dataset that reaches the market comes from an operation that didn't work. That's useful for learning how a process runs, and much less useful for learning what good judgment looks like.

• 
  PangeaVPN (@PangeaVPN) reported 56 minutes ago

  @HorluwarhArmani @SirAlexanderrr if it's the ISP breaking that page rather than Cloudflare, you need something the network can't pick out. Pangea tries five stealth transports in order, VLESS+Reality first, so one being blocked isn't the end of it. windows/mac, ios via shadowrocket. five days free.

• 
  Southpaw | ZZZ Optimizer v6 is LIVE (@Southofpaw) reported 59 minutes ago

  @JaIdabaoth Nevermind sorry just checked enka and it’s up. I might need to check cloudflare to see there’s an issue

• 
  Technopolis.tv (@technopolis_tv) reported 60 minutes ago

  @geerlingguy ...and then never opens (possible died behind cloudflare captcha)

• 
  Barneyjack (@Barneyjack) reported 1 hour ago

  oh, and your frickin @Cloudflare is down so I cant create a ticket, it keeps hanging up on Security Verification!!