Cloudflare Outage Map
The map below depicts the most recent cities worldwide where Cloudflare users have reported problems and outages. If you are having an issue with Cloudflare, make sure to submit a report below
The heatmap above shows where the most recent user-submitted and social media reports are geographically clustered. The density of these reports is depicted by the color scale as shown below.
Cloudflare users affected:
Cloudflare is a company that provides DDoS mitigation, content delivery network (CDN) services, security and distributed DNS services. Cloudflare's services sit between the visitor and the Cloudflare user's hosting provider, acting as a reverse proxy for websites.
Most Affected Locations
Outage reports and issues in the past 15 days originated from:
| Location | Reports |
|---|---|
| Los Angeles, CA | 1 |
| Paris, Île-de-France | 1 |
| New York City, NY | 1 |
| Manchester, England | 1 |
| Angers, Pays de la Loire | 1 |
| London, England | 1 |
Community Discussion
Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.
Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.
Cloudflare Issues Reports
Latest outage, problems and issue reports in social media:
-
Larius Woodson (@LariusWoodson) reportedStopping the bad guys with Cloudflare: 4,983 malicious requests blocked or challenged in the last month #cloudflare
-
Dr. Jaime Alnassim, M.S. (@JaimeAlnassim) reported@DerekAshauer And the cheap shared hosting back then could support alot of these WP sites. For $10 a month you could have 100 light WP sites. No one carried if a site was slow back then too. Now just use a static page and host of cloudflare for free
-
Jarno (@onefinalprompt) reported@darylginn @Cloudflare Good customer service still exists apparently. Noted.
-
LayerX (@LayerXlab) reportedYou close your laptop, and your coding agent usually dies with it. @ickasdev built a fix: a DGX Spark running as an always-on box for Claude Code, gated behind Cloudflare Access, with one session that follows him from the box to his laptop to his phone, without handoff. He wrote up the full setup: the control plane running in the browser, tmux keeping the session alive, and the parts that didn't work on the first try.
-
Thor Haaland (@ThorHaalands) reported@jnunemaker Cloudflare + VPS, sorted. Hetzner is getting expensive tho, recommend checking out OVH which has worked as a good replacement for me (although poor customer service)
-
🧞♂️Martin Donadieu - oss/acc (@martindonadieu) reportedSo France is joining spain to make all @Cloudflare down during games? 😭 Europe is omega doomed it's so sad
-
Meaty (@meaty_tw) reportedlong story short, cloudflare had maintenance then VRC Api was giving issues, etc. Its been a lot
-
Caroline Vrauwdeunt ✌️☮️ (@andrsnu) reported🥲 shipped a beautiful unified header tab with action buttons and matching floating tab bar for Money Magician, drilled down data to build Cloudflare-Uptime open source software as lean as possible and shipped new status page designs for it. But non of it mattered, really - as it was also the week I had to put my buddy to sleep.
-
Patrik Tang (@_patriktang) reported@anupamrjp Started on AWS, realised it sucks. Cloudflare all the way.
-
Med (@medhansh) reportedHow to make every Mac, server & cloud worker you own feel like one computer: ====== NETWORKING ====== - Tailscale: Connects all your machines into one private network. SSH into your home desktop from anywhere with no port forwarding and nothing exposed publicly - Thunderbolt Bridge: Connects two nearby Macs directly through a Thunderbolt cable. You get tens of Gbps and sub-ms latency without buying networking gear - 2.5/10GbE: The wired alternative when Thunderbolt isn’t practical. Use it when normal gigabit networking becomes the bottleneck - Cloudflare Tunnel: Gives a local service a public URL without opening a port on your router. Useful for websites, APIs and dashboards other people need to reach - ngrok: Creates a temporary public URL in seconds. Perfect for testing webhooks against something running locally ====== REMOTE ACCESS ====== - SSH + `~/.ssh/config`: Lets you create short names and reusable settings for remote machines. Type `ssh studio` instead of remembering usernames, IP addresses and ports - `ControlMaster auto`: Keeps one SSH connection open and reuses it. New terminals connect instantly instead of negotiating a fresh session every time - Mosh: SSH that survives your Wi-Fi dropping. Close the laptop, open it on a train, switch networks and the same terminal session reconnects - tmux: Keeps programs running after you disconnect. Start a long agent job, close your laptop and reconnect to it later - tmux-resurrect + continuum: Saves and restores your tmux sessions after the machine itself reboots - VS Code / Cursor Remote SSH: The editor runs on your laptop while the code, terminal and language server run on the remote machine. It feels local without syncing files - code-server: Runs VS Code inside a browser. Useful when you need to work from an iPad or a computer without your development setup - macOS Screen Sharing: Built-in remote control between Macs. On the same network it’s fast enough for normal desktop work - Sunshine + Moonlight: Streams a remote desktop using game-streaming technology. Use it when you need much lower latency than normal screen sharing ====== SERVING ====== - Tailscale Serve: Gives a local service a private HTTPS URL that only devices on your Tailscale network can open - Tailscale Funnel: Takes that private service and makes it reachable from the public internet. Useful for receiving webhooks on a home machine - Caddy: A web server and reverse proxy that gets HTTPS certificates automatically. Two lines of config, real certificates, no Let’s Encrypt homework - Cloudflare Tunnel: Better when you want public traffic to pass through Cloudflare before reaching your machine ====== FILES ====== - ***: Tracks changes, understands conflicts and lets each agent work on a separate branch. Use *** for code that agents edit, not a generic sync tool - *** worktrees: Opens multiple branches from the same repository as separate folders. Every agent gets its own workspace without cloning the repo again - Jujutsu (`jj`): A ***-compatible version-control system designed around easier rebasing, undoing and concurrent work. Worth trying when many agents produce branches at once - SMB: Shares a folder from one machine so another can mount it like a local drive. The easiest answer for two Macs on the same network - NFS: The same basic idea as SMB, with more setup and generally better performance - Mutagen: Continuously mirrors a local project to a remote machine while respecting ignored files. Use it when you want to edit locally but run remotely - Syncthing: Automatically syncs folders directly between machines. Great for notes, assets and scratch files - Don’t use Syncthing for code multiple agents edit. It syncs files but doesn’t understand branches or conflicts - rsync: Copies files or folders once, usually over SSH. Fast, scriptable and already installed almost everywhere - rclone: rsync for cloud storage. Moves files between your machines and S3, R2, B2, Google Drive and dozens of other services - pnpm: Stores each package once and hardlinks it into every project. Fourteen worktrees can share one copy instead of downloading fourteen ====== ENVIRONMENT ====== - mise: Installs and switches Node, Python, Go and Ruby versions per project. Replaces nvm, pyenv, rbenv and asdf with one fast tool - direnv: Loads the correct environment variables the moment you enter a folder, then unloads them when you leave - OrbStack: A drop-in Docker Desktop replacement for Mac. The same Docker commands with a fraction of the RAM and battery usage - Homebrew + Brewfile: Records the apps and CLI tools installed on your Mac. A new machine can recreate the setup with one command - Devcontainers: Defines the development environment in code. Anyone opening the project gets the same operating system packages, runtimes and tools - Nix / devenv: Reproduces an environment extremely precisely across machines. Powerful, but only worth the learning curve when that level of determinism matters ====== SECRETS ====== - 1Password CLI: Injects secrets into a command at runtime. Your `.env` becomes a template you can safely commit because the real values stay in 1Password - `op run`: Starts a command with the required secrets available only to that process. Nothing sensitive needs to be copied into plaintext files - 1Password Service Accounts: Give headless servers access to specific vaults without attaching them to your personal login - SOPS + age: Encrypts secret files before they enter ***. The repository stores ciphertext and approved machines decrypt it at runtime - Tailscale SSH: Uses your Tailscale identity to authorize SSH access. You stop copying and rotating public keys across every machine ====== TERMINAL ====== - Atuin: Your shell history, synced and searchable across every machine. That command from last Tuesday on the server is available on your laptop - zoxide: Learns which folders you use. Type `z api` instead of `cd ../../../services/api` - fzf: Adds fuzzy search to almost anything. Use it for files, command history, *** branches, processes and SSH hosts - ripgrep (`rg`): Searches an entire codebase in milliseconds and skips files in `.gitignore` automatically - fd: `find` with syntax you can actually remember. Type `fd config` instead of assembling a collection of flags - bat: `cat` with syntax highlighting, line numbers and *** changes - dust: Shows which folders are consuming disk space as a readable chart instead of a wall of numbers - lazygit: A full *** interface inside the terminal. Stage individual lines, inspect diffs, rebase, cherry-pick and resolve conflicts visually - btop: A readable live view of CPU, memory, disks, networks and running processes ====== CONSISTENCY ====== - just: One file containing every project command. `just dev` means the same thing on every machine and every teammate’s laptop - chezmoi: Keeps your dotfiles in *** and adapts them per machine. You get the same shell, aliases and settings across macOS and Linux - Brewfile + mise + chezmoi + just: Together these recreate your installed tools, runtime versions, personal configuration and project commands ====== ISOLATION ====== - Containers: Give each workload its own filesystem, dependencies and permissions. One broken agent can’t interfere with everything else on the machine - One container per client: An agent cannot read another client’s files if those files were never mounted into its container - Colima: A free, CLI-only way to run Docker containers on Mac - Podman: Runs containers without a permanent root-level daemon. Useful when stronger rootless isolation matters - ****: Creates and manages macOS and Linux virtual machines on Apple Silicon - UTM / Parallels: Full desktop virtual machines for workloads that need a complete graphical operating system - Firecracker: Starts tiny virtual machines in under a second. Useful when you’re building a platform that needs an isolated machine for every agent run ====== AGENT ORCHESTRATION ====== - tmux + *** worktrees: The simplest fleet manager. Every agent gets a terminal, branch and folder you can inspect directly - Claude Code hooks: Run commands automatically before or after specific Claude Code events. Useful for validation, formatting, notifications and cleanup - Claude Code subagents: Hand focused tasks to separate agents without manually opening another terminal for each one - Claude Agent SDK: Starts, steers and streams agent sessions from your own code. Use it when a terminal workflow needs to become part of a product - Inngest / Trigger .dev: Turns agent runs into durable jobs. If a process crashes, the job can retry instead of disappearing with the terminal - BullMQ / Graphile Worker: Adds a straightforward job queue backed by Redis or Postgres - launchd: Starts Mac workers after reboot and restarts them when they crash - systemd: The Linux equivalent of launchd - Temporal: Stores every step of a long workflow so it can resume after failures. Powerful, but unnecessary until durable execution becomes a real problem ====== RENTED COMPUTE ====== - Hetzner dedicated: Cheap, persistent Linux machines with lots of CPU and RAM. Good for workers that run all day - Hetzner Server Auction: Older dedicated servers sold for less. Useful when price matters more than having current hardware - DigitalOcean / Vultr / Linode: More expensive per GB, but nearby regions can make interactive SSH and remote editing feel much faster - Fly .io: Small machines that start quickly and can shut down when idle. Good for temporary workers - GitHub Actions self-hosted runners: Sends CI and batch jobs to hardware you already own instead of GitHub’s machines - Depot: Runs builds remotely and shares the cache between machines. Useful when Docker or application builds become the bottleneck - Modal / RunPod / Lambda: Rent GPUs by the hour instead of owning hardware that sits idle - MacStadium / Scaleway Apple Silicon: Rent real Macs remotely. Only worth it when the workload genuinely requires macOS ====== BROWSER AUTOMATION ====== - Playwright + `storageState`: Saves cookies and login state to a file that can move between machines. Much safer and more portable than syncing an entire Chrome profile - Puppeteer: A smaller Chrome-focused alternative when you don’t need Playwright’s multi-browser support - Chrome DevTools MCP: Lets an agent inspect and control a real Chrome session through developer tools - browser-use: Gives agents a higher-level way to navigate websites, fill forms and complete browser tasks - Browserbase / Browserless / Steel: Hosts and manages browsers for you. Useful when one local Chrome instance becomes fifty concurrent sessions - Residential proxies: Routes browser traffic through consumer IP addresses. Use them when websites block traffic from cloud servers ====== SAFETY ====== - restic + Backblaze B2: Encrypted, deduplicated, automatic offsite backups for roughly $6/TB/month. You’ll need it exactly once - Time Machine: Keeps local versions of your Mac files and makes accidental deletion easy to undo. Necessary, but not enough by itself - Carbon Copy Cloner / SuperDuper: Creates a bootable copy of your drive so a dead SSD doesn’t mean rebuilding the machine from zero - Netdata: One command installs a full metrics dashboard. Finally see which process has been eating your RAM - `memory_pressure`: Shows whether your Mac is actually running out of usable memory - `vm_stat`: Shows detailed memory usage and paging activity - `sysctl vm.swapusage`: Shows exactly how much SSD space macOS is using as emergency memory - asitop: Shows Apple Silicon CPU clusters, GPU usage, power consumption and temperatures - Uptime Kuma: Checks whether your machines and services are online and sends an alert when they aren’t - Grafana + Prometheus: Stores metrics over time and turns them into dashboards and alerts. Worth adding once you have several machines A backup isn’t real because the command succeeded It’s real when you’ve restored from it successfully ====== THE 80/20 STACK ====== Tailscale SSH + Mosh + tmux *** worktrees SMB 1Password CLI mise + direnv OrbStack pnpm just + chezmoi restic + B2 Netdata Atuin + zoxide + fzf Start here Add another tool only when you can clearly explain what problem it solves
-
i miss the sun (@1_missthesun) reported@palashshah only reason software is alive is cause agents are slow and even though u can one shot apps, no normie wants to wait 20 minutes to make an app or 5 minutes to iterate (add features etc). If instant, personal software/generative ui takes over. For software companies, i'd look at what's happening at the agent product layer. Almost every single one has the same features. Adding a feature or copying is just an hour of work. Therefore every product can add all and any feature. However, right now, you still want to prevent bloat/feature creep even though you can do anything. This stops being as relevant if inference is near instant. Since software is no longer a differentiating factor, all that remains is most likely price/reliability. Websites die and are just apis that agents connect to on a singular super app product. ie imagine cloudflare and vercel had the same products/features. What you use would depend on price. It's too easy and also not possible to add features specific to every single user, therefore it's better to let the user's interface by dynamic to them. Every app can be a super app, but people do not wants hundreds of super apps. So we'll probably see 1 or few dominant platforms, similar to how chrome dominates the browser space.
-
Bryan Ng (@boomerrbryan) reportedThere is a company that takes a cut of nearly every dollar that moves across the internet and most people have never heard its name It's not Google. It's not Amazon. It's not Meta It's Cloudflare About 20% of all websites on earth route through their servers. When you visit most major sites, you're not connecting to the site. You're connecting to Cloudflare first. They see the traffic. They meter it. They charge for it $4.2 billion in revenue last year. Up from $1.6 billion in 2021. Growing 30%+ every year. And they've achieved this without a single consumer ever choosing to use them Here's how the toll booth works: Cloudflare sits between you and the website you're trying to visit. When you type in a URL, your request goes to Cloudflare's server, not the website's server. Cloudflare checks if you're a bot, filters attacks, caches content, and then passes you through The website owner pays Cloudflare for this protection. If they don't pay, their site gets slower, less secure, and less reliable. It's not optional in any practical sense. The alternative is getting DDoS'd into oblivion or watching your site crawl 20% of the internet. Every day. Every click. Metered and billed Now here's where it gets dystopian and where the money angle opens up: Cloudflare doesn't just sit there. They're building AI tools that let website owners charge AI companies for scraping their content. Every time ChatGPT or Claude reads a webpage, Cloudflare can meter that too They turned the internet's biggest invisible gatekeeper into the internet's first AI toll collector. The same company that already touches 20% of web traffic now gets to decide what AI companies pay to read the internet The stock is up 380% in 3 years. Nobody on CNBC talks about it. Nobody on Twitter knows it exists. It's a $70 billion company hiding in plain sight And the parallel to YouTube is exact: Cloudflare is to websites what YouTube is to video. An invisible infrastructure layer that everyone depends on, nobody thinks about, and the owner of the layer collects from every transaction that passes through it The person who builds a YouTube channel is doing the same thing at a smaller scale. Owning a piece of internet infrastructure that generates revenue every time someone passes through. A video answering a question that 200 people google every month is a toll booth on that question. Every viewer pays attention. The platform pays you for their attention Most business owners rent their infrastructure from Facebook ads and Google ads. They pay the toll. They never own the booth own the booth (link in bio.)
-
feranmi (@_bumblebee7_) reported@vxnuaj @treejordan @LemonLime_AI i wouldn’t say hopeless tbh. it’s just a tough world out there. being a cs major is tough. cloudflare got 1 million applications for internship spots of about 1000 people. the field is so densely packed. not everyone goes to waterloo or a big tech school where the names can speak for you. it’s easy to say “put in the work” but that can only come from someone who’s blind and insensitive. students are asked to send cold emails upon cold emails to people who don’t care. “your cold email must make my middle finger twitch before you get a response”. it’s tough working your *** off with no results or anyone noticing you. a good number of cs majors are also immigrants who don’t have a network or know anyone. most of them just came to the U.S. with dreams and ambitions to help support those back at home. so when they see opportunities like this, sure, it looks so bad and you wonder “why would they do it?”. but when you’re in a pool where all hope seems to be lost, you happily take any rope thrown at you even if the person offering it is the devil himself. it’s a tough world out there. anyone who doesn’t have to experience it should be grateful.
-
🜑 (@1casie) reported> be me > macbook air is bricked, needs a reinstall > no second mac to build a bootable installer > find a github actions workflow that builds macOS installers for free, no mac required > perfect.jpg > trigger a build, artifact is a 17.6GB .dmg.img > click download > kb/s > literal kb/s > theoretical connection is 10MB/s > discover artifact lives on azure blob, signed URL expires in 10 min > write a bash script that resolves the azure SAS url fresh, hands it to aria2c with 16 parallel streams > 16 connections, still kb/s > mfw it's a per-IP throttle, not per-connection > repo author literally has a line in the workflow: "Enable Cloudflare WARP for faster download" > install Cloudflare WARP on my ubuntu box > single stream jumps 20KB/s -> 1.6MB/s > aria2c 16x -> 10MB/s, pinned to my ceiling > 17.6GB in ~an hour, sha256 matches github's published digest > oknowweiscooking.webp > dd it to a USB SSD > paranoid it won't boot apple silicon because it was built on an intel runner > boots apple silicon just fine, i was wrong, shut up > installer runs, reinstall chugs along > STOPS > "OS Personalization" PREFLIGHT_PERSONALIZE portioncomplete:0.15000 estimatedtimeremaining:-1 > 70000 log lines of stalled:NO > the mac can ping apple/com > it can ping cupertino > but personalization "no connections witnessed" > i don't ******* get it > try to sniff the wifi to see what it's talking to > can't > WPA2 isn't a hub, it's a switch, i can't decrypt the mac's traffic as a third client > feel stupid > dig into it > test apple's personalization signing servers from my box > gs/apple/com -> 000 > gsp-ssl/apple/com -> 000 > albert/apple/com -> 403 (works) > gs/apple/com is the signing server and it's IPv4-ONLY > my ISP (DIGI, romania) has broken IPv4 routing to apple's 17.0.0.0/8 > ICMP works, IPv6 works, CDN works, the ONE /8 macOS needs to sign firmware is a black hole > that's why it could "ping cupertino" but personalization silently died > fix: repoint the mac's IPv4 default gateway from the router to my ubuntu pc > my pc has IP forwarding + NAT masquerade + Cloudflare WARP > mac's IPv4 now tunnels through cloudflare, bypassing my ISP's broken path > watch the signing handshake complete in tcpdump, SYN -> SYN-ACK -> ClientHello -> kilobytes of signed data > portioncomplete climbs past 0.15 > weactuallydidit.jpg > STOPS AGAIN at 0.29 > silent on IPv4 > oh > the mac's IPv6 still goes straight to the router, bypassing my box > i literally cannot see it > disable IPv6 on the mac so everything falls back to the working IPv4 path > it reboots > flashes the apple logo 4 times > i'm dying > it boots > it works > 29 hours > i had to MITM my own home network because my ISP couldn't route to one (1) /8 > the mac is back > i'm buying a framework >text still isn't green
-
Matt 'TK' Taylor (@MattieTK) reported@nicole_clash This screams PWA banner to install to home screen. And also screams get on Cloudflare so you can start caching prompt responses for free so you never run the same recipe twice, through AI gateway.