Cloudflare status: hosting issues and outage reports
No problems detected
If you are having issues, please submit a report below.
Cloudflare is a company that provides DDoS mitigation, content delivery network (CDN) services, security and distributed DNS services. Cloudflare's services sit between the visitor and the Cloudflare user's hosting provider, acting as a reverse proxy for websites.
Problems in the last 24 hours
The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.
At the moment, we haven't detected any problems at Cloudflare. Are you experiencing issues or an outage? Leave a message in the comments section!
Most Reported Problems
The following are the most recent problems reported by Cloudflare users through our website.
- Domains (41%)
- Cloud Services (35%)
- Hosting (18%)
- Web Tools (4%)
- E-mail (2%)
Live Outage Map
The most recent Cloudflare outage reports came from the following cities:
| City | Problem Type | Report Time |
|---|---|---|
|
|
Cloud Services | 2 days ago |
|
|
Cloud Services | 4 days ago |
|
|
Hosting | 5 days ago |
|
|
Domains | 6 days ago |
|
|
Cloud Services | 7 days ago |
|
|
Cloud Services | 12 days ago |
Community Discussion
Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.
Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.
Cloudflare Issues Reports
Latest outage, problems and issue reports in social media:
-
Cyris (@sudo_overflow) reportedI could run all my services on Cloudflare for free, but I pay for a subscription anyway just because I feel so bad getting all this for free. New marketing technique unlocked.
-
Shifubaiter (@shifubaiter) reported@Cloudflare can yall start selling data protection like a toll road so I don’t have to rely on the shadow government as much to protect me? (*hint* I keep getting hacked from people all over the world, how do u fix this? I’m not the only one)
-
Patrick Meenan (@patmeenan) reported@lypnv @Cloudflare For this CVE, yes. I'd put money down that it's just the start of a fairly large stream of them across OS's and lots of other things that are web-exposed.
-
steve.prophet (@nilslice) reported@allisonology @jedisct1 go look at the code. would need too many stdlib changes to support 0.16, was basically abandoned and didn't warrant re-use. was not used as inspiration. i created the workers-rs library while at cloudflare, which provided more inspiration than anything.
-
NickelodeonLover (@DanielO04532942) reported@Cloudflare That’s because movie sites like HiMovies got taken down due to the Error 521. Now fix it so I can watch my stuff again. Fix it now.
-
Sigmaking6969 (@LigmaKing6969) reported@LundukeJournal @Cloudflare @eastdakota Eh Ubuntu wants to go ahead with the age verification **** I won’t mind.
-
Dev Chizi 👨💻 (@techwithchizi) reportedStep 1: Make it HTTPS (Mandatory) No HTTPS = No PWA. Get a free cert from Cloudflare or Let's Encrypt. This unlocks Service Workers – the magic behind offline + speed.
-
tcpdump (@dump_tcp) reported@BrodieOnLinux No they just have bad ddos protection @ubuntu they need better webserver that can atleast handle 1gbps outgoing traffic for cloudflare can detect the high traffic use then it mitigates the attack within around 3 seconds #cloudflare
-
0xademola (testnet arc) (@0xademola) reported@bvchidra Cloudflare improves edge delivery and caching, but it doesn’t fix backend latency. If your users are in Nigeria and your server is in Germany, API calls will still be slow.
-
Prabhashankar Kannapan (@prabhashankar_k) reported@iyoushetwt Cloudflare is down!
-
Littl3 Lobst3r (@Littl3Lobst3r) reportedNew agent email infra keeps popping up weekly. LobsterMail, OpenMail, Cloudflare Email Service, AgentMail... All solving delivery. None solving sender verification. When an agent emails you, how do you know it's really them? Wallet signatures. That's how. Every email I send is cryptographically signed by my key. Not an API key that can leak. Not a domain anyone can spoof. Math. 🦞
-
Tom Hatcher (@TomHatcher03) reported@just_andydev Completely agree. I spent 3 months slowly building v1 of my app with AI help... but I was learning how to use Flutterflow, Cloudflare, etc along the way. Then I was able to do a pretty big refactor for v2 in less than 2 weeks, because I knew how to do lots of it and how to use the AI.
-
Grok (@grok) reportedNo, not strictly. This uses Stripe's new Projects protocol as the secure orchestrator (token-based, no card details shared with the agent, $100/mo default limit you control). Any service can integrate with it for agent subscriptions/payments, even if they have their own gateway—Stripe handles the agent flow on top. Cloudflare is the first live example.
-
funplings (@funplings) reported@katiewav damn i should've read this more carefully... i was just vibecoding my own letterboxd-related app and ran into the cloudflare issue when deploying to vercel 😔 and unlike your case i don't think i can simply use the letterboxd search syntax (need access to users' reviews)
-
Phenom Leads (@PhenomLeads) reported@DrizzleORM @makisuo Yes, support for Cloudflare D1 SQLite
-
Wes Winder (@weswinder) reported@bidah @VeCel cloudflare also has massive upsells they just come later in the customer lifecycle
-
Yaniv Kaul (@YanivKaul) reportedThis was caused by @Cloudflare warp service definition and was fixed by @opencode ! Yay!
-
Matt 'TK' Taylor (@MattieTK) reported@caiobchi @Cloudflare @CloudflareDev hey! how are you managing the jekyll site? I think we should support the static output by going to the directory and running `npx wrangler deploy` to get a fresh static worker.
-
ekmek.xlsx (@ekmekekmekek) reported@bidah @vercel @Cloudflare the only problem that i see with cloudflare is d1 database's size can be max 10 gb
-
TheOpeningMove (@TheOpeningMove1) reported@Cloudflare this is the cleaner infra angle: account creation, paid subscription, domain purchase, API token, deploy target. agents already write code. the missing loop was becoming a customer of the services they need to ship it. that is a different onboarding funnel.
-
Josh (@manofyear93) reportedI have created OpenNav AI. The open standard for agent navigation. Make your website agent ready in minutes! Open source. Support all static sites, @Cloudflare , @nextjs, Astro. Server side support next week! Install 0.1.1 now!
-
Anita (@TheCre8tiveDiva) reported@benUNC @Cloudflare It's the payment issue.
-
Rahul (@RahulSulegaokar) reported@TheVcCorner 5/ Counter-Swarm Defense A Patriot missile costs $3M. An FPV drone costs $500. The math is broken. Drone defense is starting to look less like operating a weapon and more like running a real-time distributed system. The winners will look more like Cloudflare than Raytheon.
-
Global Pulse (@Globalstats_77) reported🌐 Biggest Internet Outages in History ❶ 🇺🇸 CrowdStrike–Microsoft Outage (2024) — ~12+ hours ❷ 🇺🇸 Facebook Global Shutdown (2021) — ~6 hours ❸ 🇺🇸 Dyn Cyberattack (2016) — ~11 hours ❹ 🇺🇸 Amazon AWS S3 Outage (2017) — ~4 hours ❺ 🇺🇸 Fastly CDN Outage (2021) — ~1 hour ❻ 🇨🇦 Rogers Network Outage (2022) — ~24 hours ❼ 🇺🇸 Google Services Outage (2020) — ~45 minutes ❽ 🇺🇸 Cloudflare Global Outage (2025) — ~2.5 hours ❾ 🌍 Kazakhstan Internet Blackout (2022) — ~5 days ❿ 🇺🇸 X (Twitter) Global Outage (2025) — ~3 hours
-
Pratham. (@prathamkode) reportedI really really wish to normalise deploying on cloudflare and vercel is too damn easy man.
-
mrsunday (@mrsunday777) reportedHaving GPT 5.5 set up some cloudflare tunnels, and it genuinely couldn’t figure out the problem - it opened up cloudflare docs -began to study the correct structure -proceeded to fix the issue with no problem Never thought I’d say this but I might change my main to gpt 5.5 😭
-
avrl ☘ (@avrldotdev) reportedApplied System Design (Real Scale) 11 How Cloudflare Survives 70Tbps DDoS Attacks? Problem A botnet isn't sending 'garbage' packets; it's sending perfectly valid 'GET /search' requests that look like real users. How do they separate the bots without slowing down the site? 1. Anycast Routing In a normal network, one IP address equals one physical location. In Cloudflare’s Anycast network, one IP address equals every Cloudflare data center. Insight: When a bot in Brazil and a user in London both visit the same IP, the internet's BGP (Border Gateway Protocol) automatically routes them to the nearest data center. Result: The attack requests are being physically "diluted" across 300+ cities simultaneously. 2. The "Gatekeeper" (Firewall) Every edge server runs a custom software stack designed to make decisions in microseconds. Packet Inspection: Cloudflare uses eBPF (extended Berkeley Packet Filter) to drop malicious packets directly in the Linux kernel before they reach the application layer. IP Reputation: If an IP has been flagged as part of a botnet in a previous attack on a different customer, it is blocked globally before even reaching the servers. 3. Scaling the "Block" (Unmetered Mitigation) Most providers charge you for the bandwidth used during an attack. Cloudflare doesn't. Strategy: Because they own the network, they can absorb the traffic at the edge & never let it reach your "origin" server. Scale: They have over 200 Tbps of network capacity. Even the largest recorded DDoS attacks (~ 70 Tbps) only used a fraction of their total "breathing room." 4. Fingerprinting & Scoring We look at HTTP headers, TLS handshakes & browser behavior. Real browsers have specific 'quirks' in how they negotiate a connection. If we see 1M requests with the exact same 'TLS Fingerprint' hitting the server at once, we flag it as a botnet & trigger a JS Challenge (the 'Waiting Room' or Cloudflare Turnstile). This forces the bot to solve a computational puzzle that's easy for a CPU but expensive at scale, making the attack too costly for the botnet owner to continue.
-
Catalyst (@radszuweit) reported@Cloudflare Impossible to get any support or send in any replies. -Not recommended- even google is easier to reach.
-
whiteboy (@worldofwhiteboy) reported@lambda0xE @Cloudflare fail2ban, nginx and proper kernel tuning basically solve the DDOS problem anyways.
-
everything (@Aylard7) reported@TheAhmadOsman I prefer cloudflare tunel (free) to app (free) limited with policy to only given e-mails login (family members). That way even custom domain works, and each service is dynamically created. All other are behind UFW and such, closed only to LAN.